Veracrypt#

Veracrypt is a free, open-source file and disk encryption software that allows you to create encrypted folders and volumes (the continuation of the TrueCrypt project). We use it to securely store sensitive files and data from user studies like recordings, (no yet de-identified) transcripts, and participant mappings.

General Idea: You create an encrypted volume (a file that acts like a disk) and mount it as a virtual drive. When mounted, you can read and write files to it just like any other drive, but the data is encrypted on-the-fly. When you unmount the volume, the data is securely encrypted and inaccessible without the correct password or key. This encrypted volume can be stored on your local machine, an external drive, or even a cloud storage service.

Relevant links:

• Veracrypt Official Website
• Veracrypt Documentation
• Veracrypt GitHub

Step-By-Step Guide#

Also see the Veracrypt Beginner’s Guide.

1. Download and install Veracrypt on your platform:
   Linux

   Veracrypt should like be available in your distribution’s package manager, e.g.,

   sudo apt install veracrypt  # Debian/Ubuntu
   sudo dnf install veracrypt  # Fedora
   sudo pacman -S veracrypt    # Arch

   Alternatively, you can download the AppImage or installer from the Veracrypt website and follow the installation instructions there.

   MacOS

   You can download the installer from the Veracrypt website and follow the installation instructions there.

   Windows

   You can download the installer from the Veracrypt website and follow the installation instructions there.
2. Create an encrypted volume. Open Veracrypt and click on “Create Volume”. Choose “Create an encrypted file container” (not a partition/drive) and follow the wizard to set up your volume.
   • Name: Choose a name and location for your volume file, use a name that identifies the study (e.g., 2025-interviews-sca.hc).
   • Type: You want to create a standard VeraCrypt volume, not a “Hidden VeraCrypt volume”.
   • Size: Keep in mind that you might want to store large files (e.g., audio recordings), so choose a size that fits your needs (can’t be changed for this specific volume, but you can also always create a new larger one and move stuff over). You’ll probably need at least around 2 GB for 20 interview audio recordings at 60 min.
   • Encryption Algorithm: The default AES is generally secure and fast.
   • Filesystem Type: Choose a filesystem that is compatible with your operating system (e.g., NTFS for Windows, exFAT for cross-platform compatibility).
   • Mount on other systems: If you plan to use the volume on different operating systems, check this option.
   • Password: Choose a strong password. Consider using a password manager to generate and store it securely.
3. Mount the volume. In Veracrypt, select a drive letter (Windows) or mount point (Linux/MacOS), click “Select File” to choose your encrypted volume file, and then click “Mount”. Enter your password when prompted.
4. Use the mounted volume. Once mounted, you can access it like any other drive. You can copy files to and from it, and they will be encrypted/decrypted on-the-fly.
5. When you’re done, unmount the volume in Veracrypt to ensure your data is securely encrypted.
6. Backup your encrypted volume file. Since the volume file is just a regular file, you can back it up like any other file. Consider storing a backup in a secure location (e.g., an external drive or secure cloud storage).