VeraCrypt is a cross platform encryption solution. It can create encrypted containers to protect your files, or you can encrypt an entire disk partition on a Linux system. VeraCrypt uses the latest encryption standards, so many users place their trust in it. In this tutorial, you will see the step by step instructions to encrypt an entire disk on Ubuntu Linux.
In this tutorial you will learn:
How to install VeraCrypt on Ubuntu
How to use full disk encryption with VeraCrypt on Ubuntu Linux
Privileged access to your Linux system as root or via the sudo command.
Conventions
# β requires given linux commands to be executed with root privileges either directly as a root user or by use of sudo command $ β requires given linux commands to be executed as a regular non-privileged user
Full disk Encryption with VeraCrypt on Ubuntu Linux step by step instructions
Follow the step by step instructions below to download, install, and use VeraCrypt to configure full disk encryption on Ubuntu Linux.
Choose to encrypt a non system partition/drive, since we will be encrypting the full disk. Then click next.
π Choose to encrypt the whole disk Choose to encrypt the whole disk
Select the volume type that you prefer. Hidden volumes will not be listed and so might be easier to spot for prying eyes. We will keep things simple in our example and go with standard VeraCrypt volume. π Choose your volume type and click next Choose your volume type and click next
Choose the partition or disk that you want to encrypt. We will choose /dev/sdb in our example, as it is our secondary hard drive. This is just a raw block device, with no partitions of file system currently installed.
π Choose the hard disk partition that you wish to encrypt Choose the hard disk partition that you wish to encrypt
As long as you are sure that you have selected the correct device, choose yes on the next confirmation prompt.
π Click Yes to continue Click Yes to continue
Enter your adminiatrator password, as you need root permission to perform the next step.
π Enter root password credentials Enter root password credentials
Choose the type of encryption you would like to use. Going with the default AES-512 is definitely a safe bet, unless you have some other preference. Click next to continue.
π Choose encryption before continuing Choose encryption before continuing
Choose the password that you will be using for your encrypted disk or partition. Be careful to choose something you will remember, otherwise you will lose access to all of your files. π Choose encryption password for your VeraCrypt volume Choose encryption password for your VeraCrypt volume
Select whether or not you plan to store large files in the VeraCrypt volume. This allows the program to optimize your storage accordingly.
π Select whether you will store large or small files Select whether you will store large or small files
For file system selection, we recommend ext4. We also recommend the quick format option, unless you previously had sensitive information on the disk and have time to let VeraCrypt securely delete all traces of it. Click next when done.
π Choose file system time and optionally quick format option Choose file system time and optionally quick format option
You will need to move your mouse around in this window a lot, in order to generate random input. Once the bar is full, click on format.
π Generate random input with mouse movements then format Generate random input with mouse movements then format
To mount your newly created VeraCrypt volume, click on Select Device, then choose the device path you just encrypted. Then click mount.
π Mounting our encrypted disk or partition Mounting our encrypted disk or partition
In this tutorial, we saw how to use VeraCrypt for full disk encryption on an Ubuntu Linux system. This will keep all data on our disk secure with VeraCryptβs AES-512 encryption, or whichever setup you chose. To access the volume, you just need to mount it with VeraCrypt and enter your password.