<h4>STEP 1:</h4>

<p>If you have not done so, download and install VeraCrypt. Then launch VeraCrypt by double-clicking the file VeraCrypt.exe or by clicking the VeraCrypt shortcut in your Windows Start menu.</p>

<h4>STEP 2:</h4>

<br>

The main VeraCrypt window should appear. Click <strong>Create Volume </strong>(marked with a red rectangle for clarity).</p>

<h4>STEP 3:</h4>

<br>

The VeraCrypt Volume Creation Wizard window should appear.<br>

<br>

As the option is selected by default, you can just click <strong>Next</strong>.</p>

<p>Note: In the following steps, the screenshots will show only the right-hand part of the Wizard window.</p>

<h4>STEP 4:</h4>

<br>

In this step you need to choose whether to create a standard or hidden VeraCrypt volume. In this tutorial, we will choose the former option and create a standard VeraCrypt volume.<br>

<br>

As the option is selected by default, you can just click <strong>Next</strong>.</p>

<h4>STEP 5:</h4>

<br>

In this step you have to specify where you wish the VeraCrypt volume (file container) to be created. Note that a VeraCrypt container is just like any normal file. It can be, for example, moved or deleted as any normal file. It also needs a filename, which you

will choose in the next step.<br>

<br>

The standard Windows file selector should appear (while the window of the VeraCrypt Volume Creation Wizard remains open in the background).</p>

<h4>STEP 6:</h4>

<br>

In this tutorial, we will create our VeraCrypt volume in the folder F<em>:\Data\ </em>

and the filename of the volume (container) will be <em>MyVolume.hc </em>(as can be seen in the screenshot above). You may, of course, choose any other filename and location you like (for example, on a USB memory stick). Note that the file

In the following steps, we will return to the VeraCrypt Volume Creation Wizard.</p>

<p>* Note that after you copy existing unencrypted files to a VeraCrypt volume, you should securely erase (wipe) the original unencrypted files. There are software tools that can be used for the purpose of secure erasure (many of them are free).</p>

<h4>STEP 7:</h4>

<br>

In the Volume Creation Wizard window, click <strong>Next</strong>.</p>

<h4>STEP 8:</h4>

<br>

Here you can choose an encryption algorithm and a hash algorithm for the volume. If you are not sure what to select here, you can use the default settings and click

<strong>Next </strong>(for more information, see chapters <a href="Encryption Algorithms.html">

<em>Encryption Algorithms</em></a> and <a href="Hash%20Algorithms.html">

<em>Hash Algorithms</em></a>).</p>

<h4>STEP 9:</h4>

<br>

Here we specify that we wish the size of our VeraCrypt container to be 250 megabyte. You may, of course, specify a different size. After you type the desired size in the input field (marked with a red rectangle), click

<strong>Next</strong>.</p>

<h4>STEP 10:</h4>

<br>

This is one of the most important steps. Here you have to choose a good volume password. Read carefully the information displayed in the Wizard window about what is considered a good password.<br>

<br>

<strong>Next</strong>.</p>

<p>Note: The button <strong>Next </strong>will be disabled until passwords in both input fields are the same.</p>

<h4>STEP 11:</h4>

<br>

Move your mouse as randomly as possible within the Volume Creation Wizard window at least until the randomness indicator becomes green. The longer you move the mouse, the better (moving the mouse for at least 30 seconds is recommended). This significantly increases

the cryptographic strength of the encryption keys (which increases security).<br>

</em>in the folder F<em>:\Data\ </em>(as we specified in Step 6). This file will be a VeraCrypt container (it will contain the encrypted VeraCrypt volume). Depending on the size of the volume, the volume creation may take a long time. After it finishes, the

following dialog box will appear:<br>

<br>

<br>

Click <strong>OK </strong>to close the dialog box.</p>

<h4>STEP 12:</h4>

<br>

We have just successfully created a VeraCrypt volume (file container). In the VeraCrypt Volume Creation Wizard window, click

<strong>Exit</strong>.<br>

<br>

In the remaining steps, we will mount the volume we just created. We will return to the main VeraCrypt window (which should still be open, but if it is not, repeat Step 1 to launch VeraCrypt and then continue from Step 13.)</p>

<h4>STEP 13:</h4>

<br>

Select a drive letter from the list (marked with a red rectangle). This will be the drive letter to which the VeraCrypt container will be mounted.<br>

<br>

Note: In this tutorial, we chose the drive letter M, but you may of course choose any other available drive letter.</p>

<h4>STEP 14:</h4>

<br>

Click <strong>Select File</strong>.<br>

<br>

The standard file selector window should appear.</p>

<h4>STEP 15:</h4>

<br>

In the file selector, browse to the container file (which we created in Steps 6-12) and select it. Click

<strong>Open </strong>(in the file selector window).<br>

<br>

In the following steps, we will return to the main VeraCrypt window.</p>

<h4>STEP 16:</h4>

<br>

In the main VeraCrypt window, click <strong>Mount</strong>. Password prompt dialog window should appear.</p>

<h4>STEP 17:</h4>

<br>

Type the password (which you specified in Step 10) in the password input field (marked with a red rectangle).</p>

<h4>STEP 18:</h4>

<br>

Select the PRF algorithm that was used during the creation of the volume (SHA-512 is the default PRF used by VeraCrypt). If you don&rsquo;t remember which PRF was used, just leave it set to &ldquo;autodetection&rdquo; but the mounting process will take more

time. Click <strong>OK</strong> after entering the password.<br>

VeraCrypt will now attempt to mount the volume. If the password is incorrect (for example, if you typed it incorrectly), VeraCrypt will notify you and you will need to repeat the previous step (type the password again and click

<strong>OK</strong>). If the password is correct, the volume will be mounted.</p>

<h4>FINAL STEP:</h4>

<br>

We have just successfully mounted the container as a virtual disk M:<br>

<br>

<p>You can also browse to the mounted volume the way you normally browse to any other types of volumes. For example, by opening the &lsquo;<em>Computer</em>&rsquo; (or &lsquo;<em>My Computer</em>&rsquo;) list and double clicking the corresponding drive letter

(in this case, it is the letter M).<br>

<br>

<br>

You can copy files (or folders) to and from the VeraCrypt volume just as you would copy them to any normal disk (for example, by simple drag-and-drop operations). Files that are being read or copied from the encrypted VeraCrypt volume are automatically decrypted

on the fly in RAM (memory). Similarly, files that are being written or copied to the VeraCrypt volume are automatically encrypted on the fly in RAM (right before they are written to the disk).<br>

again, you have to mount the volume. To do so, repeat Steps 13-18.</p>

<p>If you want to close the volume and make files stored on it inaccessible, either restart your operating system or dismount the volume. To do so, follow these steps:<br>

<br>

<br>

Select the volume from the list of mounted volumes in the main VeraCrypt window (marked with a red rectangle in the screenshot above) and then click

<strong>Dismount </strong>(also marked with a red rectangle in the screenshot above). To make files stored on the volume accessible again, you will have to mount the volume. To do so, repeat Steps 13-18.</p>

<ul>

<li>Change Volume Password </li><li>Set Header Key Derivation Algorithm </li><li>Add/Remove key files </li><li>Remove all key files </li></ul>

<p>&ldquo;TrueCrypt Mode&rdquo; must be checked in the dialog as show below:</p>

<p><strong>Note: </strong>Converting system partitions encrypted with TrueCrypt is not supported.</p>

</div><div class="ClearBoth"></div></body></html> \ No newline at end of file

<h2>Default Mount Parameters</h2>

<p>Starting from version 1.0f-2, it is possible to specify the PRF algorithm and the TrueCrypt mode that will be selected by default in the password dialog.</p>

<p>As show below, select the entry &quot;Default Mount Parameters&quot; under the menu &quot;Settings&quot;:</p>

<p>&nbsp;</p>

<p>The following dialog will be displayed:</p>

<p>Make your modifications and then click OK.</p>

<p>The chosen values are then written to VeraCrypt main configuration file (Configuration.xml) making them persistent.</p>

<p>All subsequent password request dialogs will use the default values chosen previously. For example, if in the Default Mount Parameters dialog you check TrueCrypt Mode and you select SHA-512 as a PRF, then subsequent password dialogs will look like:<br>

<p>&nbsp;</p>

<p><strong>Note:</strong> The default mount parameters can be overridden by the&nbsp;<a href="Command%20Line%20Usage.html">Command Line</a> switches

<strong>/tc</strong> and <strong>/hash</strong> which always take precedence.</p>

<table style="margin-left:auto; margin-right:auto">

<tbody>

<tr>

</tr>

<tr>

</tr>

</tbody>

</table>

<caption><strong>Normal volume case</strong></caption>

<tbody>

<tr>

</tr>

<tr>

<td>

</td>

</tr>

</tbody>

<caption><strong>System encryption case</strong></caption>

<tbody>

<tr>

</tr>

<tr>

</tr>

</tbody>

</table>

When mounting an outer volume, type in its password and before clicking <em style="text-align:left">

OK, </em>click <em style="text-align:left">Mount Options</em>:</div>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

&nbsp;</div>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

OK </em>and, in the main password entry dialog, click <em style="text-align:left">

OK</em>.</div>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<br style="text-align:left">

<br style="text-align:left">

<a href="VeraCrypt%20Background%20Task.html" style="text-align:left; color:#0080c0; text-decoration:none.html">

VeraCrypt Background Task</a>). Furthermore, the type of the mounted outer volume displayed in the main window changes to '<em style="text-align:left">Outer(!)</em> ':</div>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<br style="text-align:left">

<br style="text-align:left">

In the <em style="text-align:left">Volume Properties </em>dialog, the field <em style="text-align:left">

Hidden Volume Protected </em>says '<em style="text-align:left">Yes</em>': </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">

The type of the mounted outer volume is <em style="text-align:left">Outer</em>: </li></ol>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<em style="text-align:left"><br style="text-align:left">

<strong style="text-align:left">Important: You are the only person who can mount your outer volume with the hidden volume protection enabled (since nobody else knows your hidden volume password). When an adversary asks you to mount an outer volume, you of course

<em style="text-align:left">Mount Options </em>dialog window is automatically disabled after a mount attempt is completed, no matter whether it is successful or not (all hidden volumes that are already being protected will, of course, continue to be protected).

Therefore, you need to check that option <em style="text-align:left">each </em>time you attempt to mount the outer volume (if you wish the hidden volume to be protected):<br style="text-align:left">

<br style="text-align:left">

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<br style="text-align:left">

If you want to mount an outer volume and protect a hidden volume within using cached passwords, then follow these steps: Hold down the

<div class="wikidoc">

<h1>TrueCrypt Support</h1>

<p>Starting from version 1.0f, VeraCrypt supports loading TrueCrypt volumes and partitions, both normal and hidden. In order to activate this, you have to check &ldquo;TrueCrypt Mode&rdquo; in the password prompt dialog as shown below.</p>

<p><strong>Note:</strong> Only volumes and partitions created using TrueCrypt versions

<strong>6.x</strong> and <strong>7.x</strong> are supported.</p>

</div><div class="ClearBoth"></div></body></html> \ No newline at end of file

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

To summarize, there will be three passwords in total. Two of them can be revealed to an attacker (for the decoy system and for the outer volume). The third password, for the hidden system, must remain secret.</div>

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">

<em style="text-align:left">Example Layout of System Drive Containing Hidden Operating System</em></div>

<p>&nbsp;</p>