[SOLVED] Volume Encryption or Full Disk Encryption with Veracrypt?

lisamint · 11-06-2019, 05:25 AM

Hi Everyone,

What would you recommend for better security: volume encryption or full disk encryption? I am using Veracrypt. For those who don't know, Veracrypt allows to encrypt individual files, create volumes (like folders) where individual files can be placed, and also full disk encryption. I guess that the two options I referred to above have pros and cons (for example, does it take too long to get access to a full encrypted disk after entering the password?).

I would like to know your opinions on this topic. Thanks.

Boca3 · 11-06-2019, 02:22 PM

Quote:

Originally Posted by lisamint

Hi Everyone,

What would you recommend for better security: volume encryption or full disk encryption? I am using Veracrypt. For those who don't know, Veracrypt allows to encrypt individual files, create volumes (like folders) where individual files can be placed, and also full disk encryption. I guess that the two options I referred to above have pros and cons (for example, does it take too long to get access to a full encrypted disk after entering the password?).

I would like to know your opinions on this topic. Thanks.

I have found that Veracrypt can be quite slow on opening large folders or full drives.

I have decided to only encrypt my data and to use Veracrypt volumes. Even so, these volumes can be quite large so I have split my data between several volumes to speed up access times.

Hope that helps.

lisamint · 11-07-2019, 06:49 AM

Quote:

Originally Posted by Boca3

I have found that Veracrypt can be quite slow on opening large folders or full drives.

I have decided to only encrypt my data and to use Veracrypt volumes. Even so, these volumes can be quite large so I have split my data between several volumes to speed up access times.

Hope that helps.

Thank you, Boca3. I have recently read some articles that advise as a 'best' practice to separate the /home directory from the rest of the system and encrypt it. What do you thinnk?

Boca3 · 11-07-2019, 08:06 AM

Quote:

Originally Posted by lisamint

Thank you, Boca3. I have recently read some articles that advise as a 'best' practice to separate the /home directory from the rest of the system and encrypt it. What do you thinnk?

I have seen such advice.
I only encrypt my data and have multiple backups.
For the rest of my install, I run Timeshift so can restore if needed. I also keep good notes whenever I re--install Mint so am not too concernend about having to reinstall.

lisamint · 11-07-2019, 08:43 AM

Quote:

Originally Posted by Boca3

I have seen such advice.
I only encrypt my data and have multiple backups.
For the rest of my install, I run Timeshift so can restore if needed. I also keep good notes whenever I re--install Mint so am not too concernend about having to reinstall.

When you say that you encrypt 'your data', do you mean only your documents or your entire /home directory? If you do the latter, do you separate it from the rest of the entire /system partition?