Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to know the opinion of some users using (or not) the hidden volume encryption feature of Truecrypt. Personally until now I never used this feature: on Windows I encrypt the system drive as a standard volume, on GNU/Linux I encrypt using LUKS which is Truecrypt's equivalent to standard volume. As for data I use the standard volume approach as well.

I read that this feature is nice and all, but it isn't really used by most people. Do you use it or not? Why? Do you only store inside it VERY sensible data or what else? Because technically speaking doing a hidden volume which has (almost) the same size as the outer one doesn't make sense: the outer volume will be encrypted but no data will be on it, which will appear very strange.

So not only one has to plan which data store where, but has even to remember each time to mount the outer volume with hidden volume protection (otherwise there'll be a data loss when writing to it). It's a bit messy: hidden OS + outer OS + outer volume + hidden volume = 4 partitions :(

Similar question about the hidden operating system (which I don't use [yet]).

share|improve this question

closed as not constructive by grawity, techie007, Goyuix, ultrasawblade, Sathya Apr 13 '12 at 4:03

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
This question will likely solicit: opinion and extended discussion. It's a good question but not for here, unfortunately. The hidden volume feature is allow plausible deniability. Outer volume should contain decoy sensitive stuff that won't get you in serious trouble if it leaks to the adversary, but looks like it deserves to be encrypted. Inner volume is where you keep the stuff you really want to hide from the adversary. –  ultrasawblade Apr 12 '12 at 2:22
add comment

1 Answer

Unless you have a compelling need for the much higher level of security, do not use the extra features that bring all the complication with them. As you suggest in your question, it is very possible to lose data due to this complication. If the security threat is not real, all you have done is complicated your life, increased the chances of losing your data, and made all kinds of routine maintenance on your PC much more difficult. Don't use these complex tools (on your production systems) unless you have a compelling reason. Keep it simple (or you might shoot yourself in the foot).

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.