The portable edition does not work from a network drive.

VeraCrypt currently does not support multi-boot configurations where a non-Windows boot loader is installed in the Master Boot Record.

Possible Solutions: If you use a boot manager to boot Windows and Linux, move the boot manager (typically GRUB) from the Master Boot Record to a partition. Then encrypt the Windows system partition. Note that the VeraCrypt Boot Loader will become your primary boot manager and it will allow you to launch the original boot manager (e.g. GRUB) as your secondary boot manager (by pressing Esc in the VeraCrypt Boot Loader) and thus you will be able to boot Linux.

Download the latest version from https://www.veracrypt.fr/en/Downloads.html.

1. Linux

1.1. Installation

1.2. Encrypt External USB Device

1.3. Usage

2. macOS

2.1. Installation

  • Install OS X FUSE.

  • Run the VeraCrypt_1.23.dmg file.

2.2. Encrypt External USB Device

2.3. Usage

3. Windows

3.1. Installation

  • Run the VeraCrypt Setup 1.23.exe with administrative privileges.

  • Select English.

  • Click OK.

  • Check I accept the license terms.

  • Click Next.

  • Choose Install.

    ● Install
○ Extract

  • Click Next.

  • Uncheck Add VeraCrypt icon to desktop.

    C:\Program Files\VeraCrypt

■ Install for all users
■ Add VeraCrypt to Start menu
□ Add VeraCrypt icon to desktop
■ Associate the .hc file extension with VeraCrypt.
■ Create System Restore point

  • Click Install.

  • Click OK.

  • Click Finish.

  • Click No to skip viewing the tutorial.

3.2. Encrypt External USB Device and format it

Make sure that the external USB device contains a partition. Veracrypt can both encrypt a device or a partition. However, it is recommended to encrypt partitions and not devices.

Attach the external USB device.

  • Start File Explorer.

  • Set the volume label of the external USB device to VeraCrypt.

  • Close File Explorer.

  • Start VeraCrypt with administrative privileges.

  • Click Create Volume.

  • Choose Encrypt a non-system partition/drive.

    ○ Create an encrypted file container
● Encrypt a non-system partition/drive
○ Encrypt the system partition or entire system drive

  • Click Next.

    ● Standard VeraCrypt volume
○ Hidden VeraCrypt volume

  • Click Next.

  • Click Select Device.

  • Select the partition of the external USB device.

  • Click OK.

    \Device\Harddisk2\Partition1
■ Never save history

  • Click Next.

    ● Create encrypted volume and format it
○ Encrypt partition in place

  • Click Next.

    Encryption Algorithm            AES
Hask Algorithm                  SHA-512

  • Click Next.

  • Click Next.

  • Type the volume password.

  • Type the volume password.

    Password:                       ********
Confirm:                        ********
□ Use keyfiles
□ Display password
□ Use PIM

  • Click Next.

  • Optional: Click Yes for storing files larger than 4 GB.

  • Optional: Click Next.

  • Select Filesystem > NTFS.

    Filesystem      NTFS
Cluster         Default
□ Quick Format

  • Keep moving the mouse pointer until enough randomness is collected.

  • Click Format.

  • Click Yes to confirm.

  • Wait about 2 hours to finish formatting a 1 TB partition.

  • Click OK.

  • Click OK.

  • Click Exit.

  • Close VeraCrypt.

Detach the external USB device.

3.3. Encrypt External USB Device without format it

Make sure that the external USB device contains a partition. Veracrypt can both encrypt a device or a partition. However, it is recommended to encrypt partitions and not devices.

Attach the external USB device.

  • Start File Explorer.

  • Set the volume label of the external USB device to VeraCrypt.

  • Close File Explorer.

  • Start VeraCrypt with administrative privileges.

  • Click Create Volume.

  • Choose Encrypt a non-system partition/drive.

    ○ Create an encrypted file container
● Encrypt a non-system partition/drive
○ Encrypt the system partition or entire system drive

  • Click Next.

    ● Standard VeraCrypt volume
○ Hidden VeraCrypt volume

  • Click Next.

  • Click Select Device.

  • Select the partition of the external USB device.

  • Click OK.

    \Device\Harddisk2\Partition1
■ Never save history

  • Click Next.

    ○ Create encrypted volume and format it
● Encrypt partition in place

  • Click Next.

Make sure that the computer is connected with UPS. Make sure that you have another backup of the disk.

  • Click Yes.

    Encryption Algorithm            AES
Hask Algorithm                  SHA-512

  • Click Next.

  • Type the volume password.

  • Type the volume password.

    Password:                       ********
Confirm:                        ********
□ Use keyfiles
□ Display password
□ Use PIM

  • Click Next.

  • Keep moving the mouse pointer until enough randomness is collected.

  • Uncheck Display pool content.

  • Click Next.

  • Select Wipe mode: None (fastest).

  • Click Next.

  • Click Encrypt.

  • Click Yes to confirm.

  • Wait about 18 hours to finish encrypting a 1 TB partition.

  • Click OK.

  • Click OK.

  • Click Finish.

  • Close VeraCrypt.

Detach the external USB device.

3.4. Usage

  • Start VeraCrypt.

  • Attach the external USB device.

  • Select the X: drive.

  • Click Select Device.

  • Select the removable disk volume.

  • Click OK.

  • Click Mount.

  • Type the volume password.

  • Click OK.

  • Close VeraCrypt.

  • Do your thing.

  • Start VeraCrypt.

  • Select the X: drive.

  • Click Dismount.

  • Optional: Click No in the Veracrypt: Force dismount? message.

  • Optional: Close all Windows Explorer windows.

  • Optional: * Click Dismount to try again.

  • Detach the external USB device.

  • Close VeraCrypt.

3.5. Decrypt

3.5.1. Removable drives

  • Start VeraCrypt.

  • Attach the external USB device.

  • Select the X: drive.

  • Click Select Device.

  • Select the removable disk volume.

  • Click OK.

  • Click VolumeTools and select Permanently Decrypt.

  • Click Yes to confirm.

  • Click Yes to confirm.

  • Type the password in Password field.

  • Click Next.

  • Click Decrypt.

  • Click Yes to confirm.

  • Click Yes to confirm.

  • Wait for the decryption to finish.

  • Select Drive letter: | X:.

  • Select Finish.