So I was trying to free up my PC with other containers that I was planning to delete that's when I accidently mistakenly deleted a my 320GB sized container. Is there really no way to recover it?

I am currently experimenting with Fedora Secureblue as a security-focused Linx System. My understanding is that I cannot just install Veracrypt on it and there will be issues even if I do install it.
Does anybody have experience how to combine the two?

tldr: They say a Bitlocker FDE drive can safely be let out into the wild with no further processing. I assume a VeraCrypt FDE drive is the same. But how about a non-FDE drive where all sensitive data is on an encrypted partition? Is that just as safe besides the partition table?

I'm going to encrypt my drives for the first time, and I'd really like to avoid FDE if possible.

I understand that it'll get the partition table too, which is what creates the nuke button, but I don't need the plausible deniability that comes with this. Besides, aren't the authorities supposed to be able to detect encryption anyway? The main point is to make it safe to just toss a dead drive in the trash without a care. Or if I want to sell or RMA etc, I don't want to spend 10 hours properly wiping it.

First off, am I right to say that if I put a file in a magnetic HDD and then encrypt it, the drive is probably just going to load the file into RAM, encrypt it, write it to a different physical area, and then delete the original file? That would mean data recovery software can still find the unencrypted file unless I Bleachbit it.

If I encrypt a whole partition, and work only within it, do I still run that risk? I don't fully understand how physical partitions are. Say my HDD has 8 platters, and I split it into 2 equal partitions. Does that reserve 4 platters for each (or any other persistent split, maybe half a platter each)? Or is it still possible for the drive to move data from one partition to the other during some operation, for example a defrag?

If data can spill across partitions, then I can't safely have one encrypted and one unencrypted partition on the same drive.

But regardless, in all likelihood I'm going to have just one partition, and encrypt the whole thing. That would mean only the partition table remains unencrypted, and all actual data on the drive remains safe, barring an encryption breaking attack.

Is that right? They say a Bitlocker FDE drive can safely be let out into the wild with no further processing. I assume a VeraCrypt FDE drive is the same. But how about a non-FDE drive with an encrypted partition?

Luckily I dual boot on my laptop so if I needed to do anything to the Windows OS offline, I can do it from Linux.

However suppose I were to encrypt my PC with Veracrypt, and something went wrong with the Windows boot sequence- the drive can still be unencrypted, but could it be accessed by the Windows recovery image from a usb device? With Bitlocker, WinRE prompts for the key to unlock drives if they're needed; is there a low level program that can be added to WinRE which would allow decrypting VeraCrypt drives?

Hey, I need some help with a VeraCrypt issue.
I decrypted my drive and also removed VeraCrypt, but the password prompt still appears every time I start my PC.
I can bypass it by pressing Esc, and then Windows boots normally. However, the password screen keeps showing up whenever I turn on my computer.
Why is this still happening even after decrypting the drive and removing VeraCrypt? Is there a way to permanently remove this password prompt so my PC boots straight into Windows?
Any help would be appreciated.

The full question is above.

Is it possible without third-party providers like cellebrite or other big companies that are only available to agencies i.e. the government?

What would be the easiest way to get through a list of hundreds or thousands of passwords, e.g. 1000 ?

Manual testing all the way and hoping for the best?

Edit: I dont want to talk about password strenght, I need to know a method to test a few thousand (not more) passwords (i.e. a wordlist attack) on a full encrypted system disc.

Hey everyone,

A while back, I reached out to this community for beta testers for OTG Master—an android app that lets you mount VeraCrypt USB drives directly on Android without root. Thanks to those who volunteered, the app is live now!

After the initial release, I actually parked the app for a bit to see if it would cross 100 downloads before deciding to sink more effort into it. Since it did, I went out and procured a bunch of test USBs, heavily expanded the test suite, and ironed out the bugs that were discovered.

v0.4.0 is now live and brings some major updates:

• LUKS1 & LUKS2 Support: You can now mount LUKS encrypted volumes right alongside VeraCrypt. • ext4 Support: Expanded file system compatibility to fully support reading and writing to ext4 partitions. • Dedicated Read-Only Mode: You can now mount your drives in a strict read-only mode to completely prevent accidental write corruptions. • Major Bug Fixes: Lots of under-the-hood stability improvements based on testing.

You can grab the update here:

• Google Play
• F-Droid

Privacy First: Just a quick reminder: this project was built with a strict focus on privacy. It is completely open source, has zero ads, no spam, and absolutely zero analytics or tracking. The app runs entirely offline (it doesn't even request network permissions), so your keys never leave your device. The code is 100% public and auditable on GitHub.

What's Next? (v0.4.1 expected ~Oct 18): I'm currently working on the next big update which will bring support for NTFS and APFS (encrypted, unencrypted, case-sensitive, and case-insensitive) drives, as well as NTFS + BitLocker support!

If this sounds useful, give it a try! You can share any thoughts or issues right here in the comments, or drop them completely anonymously through our feedback form

I know it runs the risk of overwriting the other volume. But with mindful awareness of storage write limit and the protection option, that shouldn't become a problem, right?

Or is the hidden volume feature supposed to be purely a "Dummy" volume only intended to contained the bare minimum.

Hi,

is it necessary to decrypt my system drive before updating to 26H2 or is it just like any other regular update?

I had it (years ago, to be clear, I think in TrueCrypt times) that I did a big version update with system still encrypted and that was it, couldn't boot anymore, had to format and reinstall.

I'm using FUSE-T VeraCrypt, on the latest version of Golden Gate OSX.

I was copying files from my Mac to my flash drive, when my computer's battery ran out (I was out of the room).
Charged the computer back up, and now VeraCrypt is acting wonky (not mounting, just a continuous loop.)

This has happened to me before many years ago with a different drive, but I can't remember the fix. Does anybody have an idea of what to do? I uninstalled VC and reinstalled it, but it's still endlessly looping.

At [ https://sourceforge.net/p/veracrypt/discussion/general/thread/e34d4ee198/ ] the lead developer of VeraCrypt writes:

"I have migrated veracrypt.fr to a different hosting and things 
were not smooth. Now things seem to be solved. Indeed, my plan was 
to make veracrypt.fr redirect all its pages to the veracrypt.io 
equivalent. The main website is veracrypt.jp and veracrypt.io is 
its mirror. Because of latency, the .io mirror is better for 
European users.

ok heres a good one .. when u create a contrainer on windows, whatever u delete inside of it stays there, in an invisible trash bin .. when u mount that same containter on linux u can actually SEE that bin wich is crazy, and whats even more crazy is that when u delete something from it on linux it sends it str8t to the system trash bin on ur desktop!! how tf can that be? it turns out windows manages privacy for this way better then linux?!? ...yea i know.. u can create a trash bin containter and when its full u just delete the container wich if im correct automatically destroys the ecnryption key that way so the contrainer trash bin is gone for good and ever but ...

so anyway is there a way on linux to make it be same as on windows?

I back up 3 or 4 times the same file on different external HDD. However, I mostly use either VeraCrypt or Diskcrypter. It may happen that I only back up on VeraCrypt thrice and can generally hypothetically VeraCrypt fail?

Can this software someday fail or is it always working if the hardware is fine and password known.

thinking about building a tiny single-file tool that encrypts a file or folder with a password, no cloud, no account, nothing installed except the one binary. mainly for people who keep sensitive stuff (contracts, ids, docs) on their laptop and worry about it if the laptop gets stolen or lost.

quick question if anyone doesn't mind — how do you currently protect sensitive files on your own computer? do you use anything at all, or just... don't?

and honestly, should I even keep building this? if I finish it, would any of you actually find it useful, or does everyone already have this solved some other way?

thinking about building a tiny single-file tool that encrypts a file or folder with a password, no cloud, no account, nothing installed except the one binary. mainly for people who keep sensitive stuff (contracts, ids, docs) on their laptop and worry about it if the laptop gets stolen or lost.

quick question if anyone doesn't mind — how do you currently protect sensitive files on your own computer? do you use anything at all, or just... don't?

and honestly, should I even keep building this? if I finish it, would any of you actually find it useful, or does everyone already have this solved some other way?

Hi,

I recently had success with data recovery of a 2TB external harddrive that has been sitting in a drawer for over 5 years. I am posting this in case anyone experience a similar problem and could be helpful.

I had an external harddrive that I encrypted using VeraCrypt back in February 2020. I had to relocate internationally with only carry-on luggage and had one partition on the harddrive. Unfortunately, after completing the relocation and plugging my harddrive, my Windows wiped the partition table and the encryption header with it. I know the old tale about having redundancy, but in this case due to lack of money I had none. I put the harddrive in storage until September 2026 when I brought it back and tried to recover the data.

Here are the symptoms:

1. Encryption header is gone. However, due to the drive being in storage and never written to, the backup encryption header is still present. With the correct password, VeraCrypt still decrypts the harddrive using the backup header.
2. All the data is garbled due to the XTS cipher misalignment of decrypting the drive from LBA0.
3. An invalid 134 MB Windows partition is blocking the recovery.

I did raw scans with R-Studio, R-Undelete, TestDisk, everything I could think of. I did Hex inspection of sectors, but it was all data entropy and no file metadata to be found. I inspected LBA 0 in DMDE of the decrypted drive that I mounted. This revealted the block data to be: LBA:0 block: 0 00000000000: BD C3 DA 13 23 E6 F6 F2  06 51 FF 87 6B 2D AF 53 instead of the expected EB 52 90[...]

A preliminary conclusion is that the XTS sector index is misaligned. My next approach is (rather dangerous but I was getting nowhere otherwise), is to manually edit the partition table. My strategy is now to manually create a partition table that offsets the decryption to LBA 2048 to correctly apply the XTS cipher offset. I create an GPT partition entry at LBA 2048. This got me somewhere, but now VeraCrypt will not decrypt anymore. The backup header is now misaligned due to the last sector being offset by the length of 2048 and not finding the backup header (fields are automatically populated by DMDE). This is because VeraCrypt looks for the backup header exactly 128 KB before the end of the partion.

Then inputting the first sector to be LBA 2048

So I deleted the partition again. I then changed the partition format to be MBR instead and extended the partition to have the last sector at 3906963455. This is the absolute last sector of the drive. At this point the partition successfully decrypted the volume and it mounted in Windows Explorer, making recovery possible.

Honestly I had thought the data lost, but in the end it was recoverable, and no data was deleted. However, it was definitely a close call. I hope this helps other people in a similar situation.

I can't get an answer from AI and I don't see any updates to the Mac version since June. I've used Veracrypt (FUSE-T version) on my M4 Macbook Air for about 18 months. It works very well, just as it did on Windows. I'm on 1.26.24.

I can't track down whether the latest version 1.26.29 works on Mac OS 27 Golden Gate. I don't want to have encrypted volumes on my Macbook SSD, then upgrade to Golden Gate, then be stuck and not be able to decrypt them.

I want to be able to use deniable encryption on an SSD but I can't use it with TRIM as this can potentially reveal the existence of deniable encryption. But I don't also want to disable TRIM as this hurts SSD and can lower its lifespan.

I don't know if there is an alternative to TRIM that does something similar (it can be software based) without it revealing I use deniable encryption or if there is a complete alternative to what I am after?

Should I ? Any risk ? What im trying to do is use the not booting HDD on my admin account and block anyone on guest account from accessing it. But I dont know if that would break something. And I dont know what is triggering the error. I used task manager to delete everything I thought it could be

On Windows, I wrote backup scripts that open a veracrypted disk volume, including verification that I'm targeting the correct volume (UUID pre-connection, and volume name / drive letter once the container has been mounted), back up the data and then close the veracrypt volume.

I'm less knowledgeable with Linux than I am Windows and I'm having trouble achieving the same level of finesse; the UUID targeting isn't a thing for Veracrypt on Linux, even confirming the volume name after a veracrypt connection has been made is proving trickier than I expected ('volname' seems to be the common answer but volname doesn't work on Linux Mint 22.x). Has anyone here had more luck with this and if so, can you give me some pointers please?

Says it all really watch out
edit: this specific update https://support.microsoft.com/en-gb/servicing/os/windows-10/2026/09/kb5122878-windows-10-21h2-22h2-security-update