2. Tails
3. wiki/src/doc/encryption_and_privacy/encrypted_volumes.*.po
4. Russian
5. Zen

<h1 id="luks">Introduction to <i>LUKS</i></h1>

<h1 id="luks">Introduction to <i>LUKS</i></h1>

The GNOME desktop*Disks* utility allows you to opencreate encrypted volumes.

The *Disks* utility allows you to create encrypted volumes.

The GNOME desktop allows you to open encrypted volumes.

The GNOME desktop allows you to open encrypted volumes.

<div class="tipattack">

<div class="attack">

Such encrypted volumes are not hidden. <p>An attacker in possession of the device can know that there is an encrypted
volume on it. Take into consideration that you can be forced or tricked to give
out its passphrase.</p>

<p>An attacker in possession of the device can know that there is an encrypted
volume on it. Take into consideration that you can be forced or tricked to give
out its passphrase.</p>

<h2 id="comparison">Comparison between <i>LUKS</i> and <i>VeraCrypt</i></h2>

<h2 id="comparison">Comparison between <i>LUKS</i> and <i>VeraCrypt</i></h2>

The *Disks* utility lists all the current storage
devices on the left side of the screen.

The *Disks* utility lists all the current storage devices on the left side of the screen.

A new device appears in the list of storage devices. Click on it:.

A new device appears in the list of storage devices. Click on it.

[[!img storage_devices_after.png link=noclass="screenshot" alt=""]]

[[!img storage_devices_after.png class="screenshot" alt=""]]

In the **Format Disk** dialog:

In the **Format Disk** dialog:

If you want to securely erasoverwrite all data on the device, choose to <span class="guilabel">**Overwrite existing data with zeroes</span>** in the **Erase** drop-down listmenu.

If you want to overwrite all data on the device, choose **Overwrite existing data with zeroes** in the **Erase** menu.

Choose <span class="guilabel">**Compatible with all systems and devices (MBR/DOS)</span>** in the **Partitioning** drop-down listmenu.

Choose **Compatible with all systems and devices (MBR/DOS)** in the **Partitioning** menu.

In the confirmation dialog, make sure that the device is correct. Click **Format** to confirm.

In the confirmation dialog, make sure that the device is correct.

[[!img empty_device.png link=noclass="screenshot" alt="Free Space 123 GB"]]

[[!img empty_device.png class="screenshot" alt="Free Space 123 GB"]]

In the **Format DiskVolume** dialog:

In the **Format Volume** dialog:

**Volume Name**: y You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

**Type**: c Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

[[!img encrypted_partition.png link="noclass="screenshot" alt="Partition 1 4.0 GB LUKS / secretFilesystem 4.0 GB Ext4"]]

[[!img encrypted_partition.png class="screenshot" alt="Partition 1 4.0 GB LUKS / Filesystem 4.0 GB Ext4"]]

You can open this new partition from the sidebar of the f*Files* browser with the name you gave it.

You can open this new partition from the sidebar of the *Files* browser with the name you gave it.

When plugginyou plug in a device containingthat has an encrypted partition, Tails does not open the partition automatically but you can do so from the file browseroffers to unlock the encryption automatically.

When you plug in a device that has an encrypted partition, Tails offers to unlock the encryption automatically.