diff options
| author | Mounir IDRASSI <mounir.idrassi@idrix.fr> | 2023-06-13 00:32:41 +0200 |
|---|---|---|
| committer | Mounir IDRASSI <mounir.idrassi@idrix.fr> | 2023-06-13 00:32:41 +0200 |
| commit | b0d0fbbcfdf71dfd8a4b013e64a3c951953a03b6 (patch) | |
| tree | 3b9ea412fb8d08670a4d2711792ce9364d315350 /doc | |
| parent | 569e7b91ab322a716bfe677da29b64746f2121c3 (diff) | |
| download | VeraCrypt-b0d0fbbcfdf71dfd8a4b013e64a3c951953a03b6.tar.gz VeraCrypt-b0d0fbbcfdf71dfd8a4b013e64a3c951953a03b6.zip | |
Documentation: Clarify various points in the documentation
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/chm/VeraCrypt User Guide.chm | bin | 3156763 -> 3158861 bytes | |||
| -rw-r--r-- | doc/html/Command Line Usage.html | 2 | ||||
| -rw-r--r-- | doc/html/Creating New Volumes.html | 2 | ||||
| -rw-r--r-- | doc/html/Program Menu.html | 14 |
4 files changed, 9 insertions, 9 deletions
diff --git a/doc/chm/VeraCrypt User Guide.chm b/doc/chm/VeraCrypt User Guide.chm Binary files differindex cef4f98c..20748492 100644 --- a/doc/chm/VeraCrypt User Guide.chm +++ b/doc/chm/VeraCrypt User Guide.chm diff --git a/doc/html/Command Line Usage.html b/doc/html/Command Line Usage.html index 4b8f828d..c463b04c 100644 --- a/doc/html/Command Line Usage.html +++ b/doc/html/Command Line Usage.html @@ -292,7 +292,7 @@ It has no parameters and it indicates that no message box or dialog will be disp </tr> <tr> <td>/FastCreateFile</td> -<td>Use a faster but potentially insecure way to create file containers. This applies to both UI and command line.</td> +<td>Enables a faster, albeit potentially insecure, method for creating file containers. This option carries security risks as it can embed existing disk content into the file container, possibly exposing sensitive data if an attacker gains access to it. Note that this switch affects all file container creation methods, whether initiated from the command line, using the /create switch, or through the UI wizard.</td> </tr> <tr> <td><em>/protectMemory</em> </td> diff --git a/doc/html/Creating New Volumes.html b/doc/html/Creating New Volumes.html index 5c235c10..7fe6144e 100644 --- a/doc/html/Creating New Volumes.html +++ b/doc/html/Creating New Volumes.html @@ -59,7 +59,7 @@ Note that the output of a hash function is <em>never </em>used directly as an en <h3 id="QuickFormat">Quick Format</h3> <p>If unchecked, each sector of the new volume will be formatted. This means that the new volume will be <em>entirely </em>filled with random data. Quick format is much faster but may be less secure because until the whole volume has been filled with files, it may be possible to tell how much data it contains (if the space was not filled with random data beforehand). - If you are not sure whether to enable or disable Quick Format, we recommend that you leave this option unchecked. Note that Quick Format can only be enabled when encrypting partitions/devices.</p> + If you are not sure whether to enable or disable Quick Format, we recommend that you leave this option unchecked. Note that Quick Format can only be enabled when encrypting partitions/devices, except on Windows where it is also available when creating file containers.</p> <p>Important: When encrypting a partition/device within which you intend to create a hidden volume afterwards, leave this option unchecked.</p> <h3 id="dynamic">Dynamic</h3> <p>Dynamic VeraCrypt container is a pre-allocated NTFS sparse file whose physical size (actual disk space used) grows as new data is added to it. Note that the physical size of the container (actual disk space that the container uses) will not decrease when diff --git a/doc/html/Program Menu.html b/doc/html/Program Menu.html index 02ee86e6..c7ea0534 100644 --- a/doc/html/Program Menu.html +++ b/doc/html/Program Menu.html @@ -134,12 +134,12 @@ Rescue Disk</a>.</p> <em>Select Device</em> or <em>Select File</em>, select the volume, select <em>Tools</em> -> <em>Restore Volume Header</em>, and then follow the instructions.<br> <br> -WARNING: Restoring a volume header also restores the volume password that was valid when the backup was created. Moreover, if keyfile(s) are/is necessary to mount a volume when the backup is created, the same keyfile(s) will be necessary to mount the volume +WARNING: Restoring a volume header also restores the volume password and PIM that were valid when the backup was created. Moreover, if keyfile(s) are/is necessary to mount a volume when the backup is created, the same keyfile(s) will be necessary to mount the volume again after the volume header is restored. For more information, see the section <a href="Encryption%20Scheme.html"><em>Encryption Scheme</em></a> in the chapter <a href="Technical%20Details.html"><em>Technical Details</em></a>.<br> <br> -After you create a volume header backup, you might need to create a new one only when you change the volume password and/or keyfiles. Otherwise, the volume header remains unmodified so the volume header backup remains up-to-date.</p> +After you create a volume header backup, you might need to create a new one only when you change the volume password and/or keyfiles, or when you change the PIM value. Otherwise, the volume header remains unmodified so the volume header backup remains up-to-date.</p> <p>Note: Apart from salt (which is a sequence of random numbers), external header backup files do not contain any unencrypted information and they cannot be decrypted without knowing the correct password and/or supplying the correct keyfile(s). For more information, see the chapter <a href="Technical%20Details.html"> <em>Technical Details</em></a>.</p> @@ -147,10 +147,10 @@ After you create a volume header backup, you might need to create a new one only there is no hidden volume within the volume, the area reserved for the hidden volume header in the backup file will be filled with random data (to preserve plausible deniability).<br> <br> When <em>restoring</em> a volume header, you need to choose the type of volume whose header you wish to restore (a standard or hidden volume). Only one volume header can be restored at a time. To restore both headers, you need to use the function twice (<em>Tools</em> - -> <em>Restore Volume Header</em>). You will need to enter the correct password (and/or to supply the correct keyfiles) that was/were valid when the volume header backup was created. The password (and/or keyfiles) will also automatically determine the type + -> <em>Restore Volume Header</em>). You will need to enter the correct password (and/or to supply the correct keyfiles) and the non-default PIM value, if applicable, that were valid when the volume header backup was created. The password (and/or keyfiles) and PIM will also automatically determine the type of the volume header to restore, i.e. standard or hidden (note that VeraCrypt determines the type through the process of trial and error).<br> <br> -Note: If the user fails to supply the correct password (and/or keyfiles) twice in a row when trying to mount a volume, VeraCrypt will automatically try to mount the volume using the embedded backup header (in addition to trying to mount it using the primary +Note: If the user fails to supply the correct password (and/or keyfiles) and/or the correct non-default PIM value twice in a row when trying to mount a volume, VeraCrypt will automatically try to mount the volume using the embedded backup header (in addition to trying to mount it using the primary header) each subsequent time that the user attempts to mount the volume (until he or she clicks <em>Cancel</em>). If VeraCrypt fails to decrypt the primary header but it successfully decrypts the embedded backup header at the same time, the volume is mounted and the user is warned that the volume header is damaged (and informed as to how to repair it).</p> <h3 id="Settings-Performance">Settings -> Performance and Driver Options</h3> @@ -164,10 +164,10 @@ Disable this option if you experience stability issues (like volume access issue <h3>Settings -> Preferences</h3> <p>Invokes the Preferences dialog window, where you can change, among others, the following options:</p> <h4>Wipe cached passwords on exit</h4> -<p>If enabled, passwords (which may also contain processed keyfile contents) cached in driver memory will be cleared when VeraCrypt exits.</p> +<p>If enabled, passwords (which may also contain processed keyfile contents) and PIM values cached in driver memory will be cleared when VeraCrypt exits.</p> <h4>Cache passwords in driver memory</h4> -<p>When checked, passwords and/or processed keyfile contents for up to last four successfully mounted VeraCrypt volumes are cached. This allows mounting volumes without having to type their passwords (and selecting keyfiles) repeatedly. VeraCrypt never saves - any password to a disk (however, see the chapter <a href="Security%20Requirements%20and%20Precautions.html"> +<p>When checked, passwords and/or processed keyfile contents for up to last four successfully mounted VeraCrypt volumes are cached. If the 'Include PIM when caching a password' option is enabled in the Preferences, non-default PIM values are cached alongside the passwords. This allows mounting volumes without having to type their passwords (and selecting keyfiles) repeatedly. VeraCrypt never saves + any password or PIM values to a disk (however, see the chapter <a href="Security%20Requirements%20and%20Precautions.html"> <em>Security Requirements and Precautions</em></a>). Password caching can be enabled/disabled in the Preferences (<em>Settings</em> -> <em>Preferences</em>) and in the password prompt window. If the system partition/drive is encrypted, caching of the pre-boot authentication password can be enabled or disabled in the system encryption settings (<em>Settings</em> > ‘<em>System Encryption</em>’).</p> <h4>Temporary Cache password during "Mount Favorite Volumes" operations</h4> |