{"id":3910,"date":"2021-01-28T16:31:45","date_gmt":"2021-01-28T16:31:45","guid":{"rendered":"https:\/\/linuxways.net\/?p=3910"},"modified":"2021-01-28T16:54:32","modified_gmt":"2021-01-28T16:54:32","slug":"how-to-install-and-use-veracrypt-on-ubuntu-20-04","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/ubuntu\/how-to-install-and-use-veracrypt-on-ubuntu-20-04\/","title":{"rendered":"How to Install and Use Veracrypt on Ubuntu 20.04"},"content":{"rendered":"

If you do not want others to have access to your data, then encryption is essential. When you encrypt your sensitive data, unauthorized persons cannot easily get to it.<\/p>\n

This how-to guide focuses on the installation and basic usage of Veracrypt disk encryption software on Ubuntu Linux. Veracrypt is an open-source software and it is free.<\/p>\n

Install Veracrypt<\/h2>\n

As seen on the official downloads page (link: https:\/\/www.veracrypt.fr\/en\/Downloads.html), two options are available for using Veracrypt on Ubuntu Linux, namely: GUI and console. GUI means graphical-based and console means text-based(command-line.)<\/p>\n

Install Veracrypt: GUI<\/h3>\n

Run the following command in the Ubuntu terminal to download the Veracrypt GUI installer package.<\/p>\n

$ sudo wget https:\/\/launchpad.net\/veracrypt\/trunk\/1.24-update7\/+download\/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb<\/strong><\/pre>\n
Now, you may install the downloaded package as follows.<\/p>\n
$ sudo apt-get install .\/veracrypt-1.24-Update7-Ubuntu-20.04-amd64.deb<\/strong><\/pre>\n
Enter y<\/strong> to continue with the installation if prompted.<\/p>\n
After a successful installation, you can launch Veracrypt from the Applications menu > Accessories > Veracrypt.<\/p>\n
Install Veracrypt: Console<\/h3>\n
Run the following command in the Ubuntu terminal to download the Veracrypt console installer package.<\/p>\n
$ sudo wget https:\/\/launchpad.net\/veracrypt\/trunk\/1.24-update7\/+download\/veracrypt-console-1.24-Update7-Ubuntu-20.04-amd64.deb<\/strong><\/pre>\n
You may now proceed to install the downloaded package. Run the command below.<\/p>\n
$ dpkg -i .\/veracrypt-console-1.24-Update7-Ubuntu-20.04-amd64.deb<\/strong><\/pre>\n
When the installation completes successfully, you may begin to use Veracrypt in the Ubuntu terminal. To see usage info, run the following command.<\/p>\n
$ veracrypt -h<\/strong><\/pre>\n
Encrypt Your Sensitive Data<\/h2>\n
Let us imagine that you have a folder named folder1 on your Ubuntu desktop which contains sensitive documents. We are going to create an encrypted volume via the GUI and the console to serve as a personal vault for storing such sensitive documents.<\/p>\n
GUI Method:<\/h3>\n
Create an encrypted volume<\/h4>\n
1. Launch Veracrypt from the Applications<\/strong> menu > Accessories<\/strong> > Veracrypt<\/strong><\/p>\n
2.\u00a0 Click Create<\/strong><\/p>\n
3.\u00a0 In the Veracrypt volume creation wizard, choose Create an encrypted file container<\/strong><\/p>\n
4.\u00a0 Click Next<\/strong><\/p>\n
<\/strong><\/p>\n
Figure 1: <\/strong>Create an encrypted file container<\/p>\n
5.\u00a0 On the Volume Type page, choose the first option labeled Standard Veracrypt volume<\/strong><\/p>\n
6.\u00a0 Click Next<\/strong><\/p>\n
7.\u00a0 Under Volume Location, click Select File<\/strong><\/p>\n
8.\u00a0 Choose your desired location on the left and then enter a name for the encrypted file container at the top<\/p>\n
<\/p>\n
Figure 2:<\/strong> Name your new encrypted file container<\/p>\n
9.\u00a0 Click Save<\/strong> at the bottom of the window<\/p>\n
10.\u00a0 Back to the Volume Location page, click Next<\/strong><\/p>\n
11.\u00a0 Under Encryption Options, leave the default selections: AES and SHA-512, and click Next<\/strong><\/p>\n
12.\u00a0 Under Volume Size, enter the desired volume size. Click the drop-down menu to switch between Gigabytes, Megabytes and Kilobytes<\/p>\n
<\/p>\n
Figure 3:<\/strong> Specify the size of the encrypted file container<\/p>\n
13.\u00a0 Click Next<\/strong><\/p>\n
14.\u00a0 Under Volume Password, enter an encryption password<\/p>\n
15.\u00a0 Click Next<\/strong><\/p>\n
16.\u00a0 Under Format Options, you may choose Linux Ext3 from the drop-down menu<\/p>\n
<\/p>\n
Figure 4:<\/strong> Choose filesystem type for the encrypted volume<\/p>\n
17.\u00a0 Click Next<\/strong><\/p>\n
18.\u00a0 Under Cross-Platform Support, let us go with the default selection<\/p>\n
19.\u00a0 Click Next <\/strong>and then click OK<\/strong> when prompted<\/p>\n
20.\u00a0 Under Volume Format, begin to move your mouse randomly for at least 1 minute<\/p>\n
<\/strong><\/p>\n
Figure 5:<\/strong> Move your mouse randomly<\/p>\n
21.\u00a0 When you are done, click Format<\/strong><\/p>\n
22.\u00a0 When prompted, enter your Linux user password and click OK<\/strong><\/p>\n
23.\u00a0 Wait for a message indicating that your Veracrypt volume was successfully created<\/p>\n
24.\u00a0 Click OK<\/strong><\/p>\n
25.\u00a0 Click Exit<\/strong><\/p>\n
Mount the encrypted volume<\/h4>\n
1.\u00a0 Back to the main VeraCrypt window, click any free slot in the list<\/p>\n
2.\u00a0 Click Select File<\/strong><\/p>\n
3.\u00a0 Choose the encrypted file container which you created earlier<\/p>\n
4.\u00a0 Click Open<\/strong> at the bottom of the Window<\/p>\n
5.\u00a0 Click Mount<\/strong><\/p>\n
<\/strong><\/p>\n
Figure 6: <\/strong>Mount encrypted volume<\/p>\n
6.\u00a0 When prompted, enter your encryption password and click OK<\/strong><\/p>\n
7.\u00a0 You should now see a new device icon on your desktop<\/p>\n
The mounted device will also be listed under Devices<\/strong> when you open File Manager by accessing your home directory for instance. Figure 7 below shows the default mount directory path.<\/p>\n
<\/p>\n
Figure 7:<\/strong> Encrypted volume mount directory path<\/p>\n
You may now proceed to move your sensitive folder into your personal vault.<\/p>\n
<\/p>\n
Figure 8:<\/strong> Mounted volume listed under devices<\/p>\n
Dismount the encrypted volume<\/h4>\n
1.\u00a0 To dismount the encrypted volume, make sure that the appropriate slot is selected in the main Veracrypt window<\/p>\n
2.\u00a0 Click Dismount<\/strong><\/p>\n
3.\u00a0 The slot entry should now be blank<\/p>\n
4.\u00a0 Also, you should no longer see the encrypted volume on your desktop or listed under Devices<\/strong><\/p>\n
<\/strong><\/p>\n
Figure 9: <\/strong>Dismount encrypted volume<\/p>\n
Console Method:<\/h3>\n
Create an encrypted volume<\/h4>\n
Run the command below in the Ubuntu terminal to begin creating your encrypted volume.<\/p>\n
$ veracrypt --create<\/strong><\/pre>\n
When prompted to choose a volume type, enter 1<\/strong> for a Normal volume<\/p>\n\n\n\n
\n
Volume type:<\/p>\n
1) Normal<\/p>\n
2) Hidden<\/p>\n
Select [1]: 1<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Next, you would be prompted to enter volume path and volume size. In the example below, the encrypted volume is called personal_vault and will be created in my home directory. The size of the personal vault will be 2 Gigabytes.<\/p>\n\n\n\n
\n
Enter volume path: \/home\/shola\/personal_vault<\/strong><\/p>\n
Enter volume size (sizeK\/size[M]\/sizeG): 2G<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
For encryption algorithm and hash algorithm, the default AES and SHA-512 values are recommended. Enter 1<\/strong> in both cases.<\/p>\n\n\n\n
\n
Encryption Algorithm:<\/p>\n
1) AES<\/p>\n
2) Serpent<\/p>\n
3) Twofish<\/p>\n
4) Camellia<\/p>\n
5) Kuznyechik<\/p>\n
6) AES(Twofish)<\/p>\n
7) AES(Twofish(Serpent))<\/p>\n
8) Camellia(Kuznyechik)<\/p>\n
9) Camellia(Serpent)<\/p>\n
10) Kuznyechik(AES)<\/p>\n
11) Kuznyechik(Serpent(Camellia))<\/p>\n
12) Kuznyechik(Twofish)<\/p>\n
13) Serpent(AES)<\/p>\n
14) Serpent(Twofish(AES))<\/p>\n
15) Twofish(Serpent)<\/p>\n
Select [1]: 1<\/strong><\/p>\n
Hash algorithm:<\/p>\n
1) SHA-512<\/p>\n
2) Whirlpool<\/p>\n
3) SHA-256<\/p>\n
4) Streebog<\/p>\n
Select [1]: 1<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
For filesystem, Linux Ext3 would suffice. You may enter 4<\/strong> to choose that.<\/p>\n\n\n\n
\n
Filesystem:<\/p>\n
1) None<\/p>\n
2) FAT<\/p>\n
3) Linux Ext2<\/p>\n
4) Linux Ext3<\/p>\n
5) Linux Ext4<\/p>\n
6) NTFS<\/p>\n
7) exFAT<\/p>\n
8) Btrfs<\/p>\n
Select [2]: 4<\/strong><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Now, it is time to choose a strong encryption password. You will get a warning if your chosen password is determined to be weak.<\/p>\n
Note: <\/strong>Using a short password is NOT recommended.<\/p>\n\n\n\n
\n
Enter password:<\/p>\n
WARNING: Short passwords are easy to crack using brute force techniques!<\/p>\n
We recommend choosing a password consisting of 20 or more characters. Are you sure you want to use a short password? (y=Yes\/n=No) [No]: y<\/strong><\/p>\n
Re-enter password:<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
When you are prompted to enter PIM, press the enter key on your keyboard to accept the default value. Do the same when you are prompted to enter the keyfile path.<\/p>\n
PIM is a number that specifies how many times your password is hashed. A keyfile is used alongside a password, such that any volume that uses the keyfile cannot be mounted if the correct keyfile is not provided. As we are focusing on basic usage here, the default values would suffice.<\/p>\n\n\n\n
\n
Enter PIM:<\/p>\n
Enter keyfile path [none]:<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Finally, you would need to randomly type on the keyboard for at least 1 minute and quite fast too. This is supposed to make the encryption stronger. Avoid the enter key while you type. Press Enter only when you are done typing and then wait for the encrypted volume to be created.<\/p>\n\n\n\n
\n
Please type at least 320 randomly chosen characters and then press Enter:<\/p>\n
Done: 100% Speed: 33 MiB\/s Left: 0 s<\/p>\n
The VeraCrypt volume has been successfully created.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Mount the encrypted volume<\/h4>\n
To access the content of the encrypted volume, you need to first mount it. The default mount directory is \/media\/veracrypt1 but you can create yours if you wish.<\/p>\n
For example, the following command will create a mount directory under \/mnt.<\/p>\n
$ sudo mkdir \/mnt\/personal_vault<\/strong><\/pre>\n
The next command below will begin mounting the encrypted volume.<\/p>\n
$ veracrypt --mount \/home\/shola\/personal_vault<\/strong><\/pre>\n
When you are prompted, either press the enter key to use the default mount directory or type your own mount directory path. You would be prompted to enter your encryption password next. For PIM, keyfile and protect hidden volume prompts, hit the enter key to use the default values.<\/p>\n\n\n\n
\n
Enter mount directory [default]: \/mnt\/personal_vault<\/strong><\/p>\n
Enter password for \/home\/shola\/personal_vault:<\/p>\n
Enter PIM for \/home\/shola\/personal_vault:<\/p>\n
Enter keyfile [none]:<\/p>\n
Protect hidden volume (if any)? (y=Yes\/n=No) [No]:<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Run the following command to list mounted volumes.<\/p>\n
$ veracrypt --list<\/strong><\/pre>\n\n\n\n
\n
1: \/home\/shola\/personal_vault \/dev\/mapper\/veracrypt1 \/mnt\/personal_vault<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
You may now move your sensitive folder to your personal vault as follows.<\/p>\n
$ sudo<\/strong> mv \/home\/shola\/folder1 \/mnt\/personal_vault<\/strong><\/pre>\n
To list the contents of your personal vault, run:<\/p>\n
$ ls -l \/mnt\/personal_vault<\/strong><\/pre>\n
Dismount the encrypted volume<\/h4>\n
The following command will dismount the encrypted volume.<\/p>\n
$ veracrypt --dismount \/mnt\/personal_vault<\/strong><\/pre>\n
If you run veracrypt –list<\/strong> again, you should get a message indicating that no volume is mounted.<\/p>\n
Conclusion<\/h2>\n
Veracrypt has some very advanced capabilities but we only covered the basics in this article. Feel free to share your experiences with us in the comments section.<\/p>\n\n\n
<\/p>","protected":false},"excerpt":{"rendered":"
If you do not want others to have access to your data, then encryption is essential. When you encrypt your sensitive data, unauthorized persons cannot easily get to…<\/p>","protected":false},"author":28,"featured_media":3921,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[100,163],"class_list":["post-3910","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ubuntu","tag-ubuntu-20-04","tag-veracrypt"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/3910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=3910"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/3910\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/3921"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=3910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=3910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=3910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}