[[!meta title="Createing and useing LUKS encrypted volumes"]]

[[!meta title="Creating and using LUKS encrypted volumes"]]

<p>The simplest way to carry around the documents that you want to use
with Tails encrypted is to use the [[encrypted pPersistent
sStorage|first_steps/persistenct_storage]].</p>

<p>The simplest way to carry around the documents that you want to use
with Tails encrypted is to use the [[Persistent
Storage|persistent_storage]].</p>

- The GNOME desktop*Disks* utility allows you to opencreate encrypted volumes.

- The *Disks* utility allows you to create encrypted volumes.

- The GNOME desktop allows you to open encrypted volumes.

- The GNOME desktop allows you to open encrypted volumes.

<span class="application">Disks</span>The *Disks* utility lists all the current storage
devices on the left side of the screen.

The *Disks* utility lists all the current storage devices on the left side of the screen.

A new device appears in the list of storage devices. Click on it:.

A new device appears in the list of storage devices. Click on it.

Click on the <span class="guimenu">[[!img lib/open-menuview-more.png alt="MenuDrive Options" class="symbolic" link="no"]]</span> button in the title bar and choose <span class="guilabel">**Format Disk…</span>** to erase all the existing partitions on the device.

Click on the [[!img lib/view-more.png alt="Drive Options" class="symbolic" link="no"]] button in the title bar and choose **Format Disk** to erase all the existing partitions on the device.

In the <span class="guilabel">**Format Disk</span>** dialog:

In the **Format Disk** dialog:

If you want to erasoverwrite all data securely, choose to <span class="guilabel">on the device, choose **Overwrite existing data with zeroes</span>** in the <span class="guilabel">Erase</span> drop-down list**Erase** menu.

If you want to overwrite all data on the device, choose **Overwrite existing data with zeroes** in the **Erase** menu.

Choose <span class="guilabel">**Compatible with all systems and devices (MBR/DOS)</span>** in the <span class="guilabel">Partitioning</span> drop-down list**Partitioning** menu.

Choose **Compatible with all systems and devices (MBR/DOS)** in the **Partitioning** menu.

In the confirmation dialog, make sure that the device is correct. Click <span class="bold">Format</span> to confirm.

In the confirmation dialog, make sure that the device is correct.

In the <span class="guilabel">Create Partition</span> dialogscreen:

In the <span class="guilabel">Create Partition</span> screen:

<span class="guilabel">Partition Size</span>: you can create a partition on the whole device or only on part of it. In this example we are creating a partition of 4.0 GB on a device of 8.1 GB.

<span class="guilabel">Partition Size</span>: you can create a partition on the whole device or only on part of it.

In the <span class="guilabel">Format Disk</span>**Format Volume** dialog:

In the **Format Volume** dialog:

<span class="guilabel">Name</span>: y You can setgive a name forto the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

<span class="guilabel">Type</span>: choose <span class="guilabel"> Choose **Internal disk for use with Linux systems
only (Ext4)</span> and <span class="guilabel">** and **Password protect volume (LUKS)</span>.**.

Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

In the <span class="guilabel">Create PartitionSet Password</span> dialogscreen:

In the <span class="guilabel">Set Password</span> screen:

<span class="guilabel">Passphraseword</span>: type a passphrase for the encrypted partition and repeat it to confirm.

<span class="guilabel">Password</span>: type a passphrase for the encrypted partition and repeat it to confirm.

[[!img encrypted_partition.png link="no" alt="Partition 1 4.0 GB LUKS / secretFilesystem 4.0 GB Ext4"]]

[[!img encrypted_partition.png link="no" alt="Partition 1 4.0 GB LUKS / Filesystem 4.0 GB Ext4"]]

When plugginyou plug in a device containingthat has an encrypted partition, Tails does not open the partition automatically but you can do so from the file browseroffers to unlock the encryption automatically.

When you plug in a device that has an encrypted partition, Tails offers to unlock the encryption automatically.