VeraCrypt
VeraCrypt is a free, open-source, on-the-fly disk encryption tool for Windows, macOS, and Linux. It builds on the legacy of TrueCrypt with enhanced security — addressing vulnerabilities in the original encryption algorithms while maintaining full compatibility with existing TrueCrypt volumes. VeraCrypt can encrypt entire system drives, create virtual encrypted disks (containers) that behave like regular drives, or encrypt individual partitions and storage devices.
Key Features
- On-the-fly encryption — Encrypts and decrypts data in real-time as you read and write, with no noticeable performance impact on modern hardware
- Multiple encryption algorithms — Supports AES, Serpent, Twofish, and cascading combinations (AES+Twofish, AES+Twofish+Serpent) for layered protection
- Hidden volumes (plausible deniability) — Create a hidden encrypted volume inside another encrypted volume; a coercion password reveals decoy data while the real data stays hidden
- Full-disk encryption — Encrypt entire system partitions or drives, including Windows system drives with pre-boot authentication
- Cross-platform compatibility — Identical encrypted volumes work seamlessly across Windows, macOS, and Linux
- Pre-boot authentication — System drive encryption requires a password before the OS boots, preventing cold-boot and offline attacks
- Parallelized encryption — Uses multiple CPU cores for faster encryption and decryption on modern processors
- Keyfiles support — Use any file as an additional authentication factor alongside your password
Why Use VeraCrypt?
If you travel with a laptop, use a shared computer, or store sensitive documents on portable drives, VeraCrypt is the gold standard for protecting data at rest. It is trusted by journalists, activists, security professionals, and privacy-conscious users worldwide. The hidden volume feature provides plausible deniability — essential for high-risk environments where coercion is a real threat.
Use Cases
- Laptop theft protection — Full-disk encryption ensures your data is inaccessible without the password, even if the drive is physically removed
- Travel with sensitive documents — Create an encrypted container on a USB drive that works on any computer without client installation
- Secure cloud backups — Encrypt your data locally before uploading to cloud storage, preventing cloud provider or third-party access
- Plausible deniability — Journalists and activists can hide sensitive data inside a hidden volume revealed only with a specific password
Platform
Linux · macOS · Windows
Licence
Apache 2.0 (derived from TrueCrypt License 3.0)