Encrypt USB Stick with Vera Crypt
How to encrypt an USB stick using Vera Crypt.
If you like my work, ❤️ Sponsor Me. It would mean the world to me!

Installation

VeraCrypt is not available on the default Ubuntu repositories. Therefore, to install it using the package manger, you have to add the PPA repositories.
Add PPA repos using the command below. Note that this repository is not related to VeraCrypt even though Unit 193 is Xubuntu developer and he is a great contributor to the open source community;
1
sudo add-apt-repository ppa:unit193/encryption
2
sudo apt-get update
3
sudo apt install veracrypt
Copied!

Traveler Disk Setup

PLEASE NOTE: Since we are not using Windows, there is no Tools > Traveler Disk Setup option. This is expected. Nevertheless, we can create the Traveler Disk manually:
... For linux and MAC this option is not available, but the apps are already portable. I just had to copy the executables from /usr/bin in Linux and Applications in OSX. I've tested them on clean system where TrueCrypt wasn't installed. - Ask Ubuntu: Create veracrypt traveler disk in Ubuntu

Partition the USB Stick

The first step is to create two Partitions on your USB Stick:
    a small one called Travel-Disk using the NTFS file system and is 512 MB in size
      this partition won't be encrypted; It will provide the VeraCrypt binaries
    a big one claiming all of the remaining space of your USB Stick
      we are going to encrypt this partition in a minute

Copy VeraCrypt binaries

Next we'll transfer the VeraCrypt binaries to the Travel-Disk Partition. Below we are assuming it is mounted under /media/$USER/Travel-Disk.

Linux

1
# Create a Linux directory:
2
mkdir /media/$USER/Travel-Disk/Linux
3
4
# Copy the veracrypt binary:
5
cp /usr/bin/veracrypt /media/$USER/Travel-Disk/Linux/
6
7
# Create a brief README:
8
cat > /media/$USER/Travel-Disk/Linux/README.md << 'EOF'
9
# VeraCrypt for Linux
10
11
Execute the veracrypt binary from your Terminal:
12
13
sh -c /media/$USER/Travel-Disk/Linux/veracrypt
14
EOF
Copied!

macOS

Unfortunately for macOS there is no standalone version available, because macFUSE 3.10 or newer must be installed too. So the best we can do is to download the latest stable VeraCrypt DMG file along with the latest stable macFuse and copy both files to Travel-Disk together with a brief README file:
1
# Create a macOS directory:
2
mkdir /media/$USER/Travel-Disk/macOS
3
4
# Copy the VeraCrypt DMG file:
5
cp ~/Downloads/VeraCrypt*.dmg /media/$USER/Travel-Disk/macOS/
6
7
# Copy the macFuse DMG file:
8
cp ~/Downloads/macfuse*.dmg /media/$USER/Travel-Disk/macOS/
9
10
# Create a brief README:
11
cat > /media/$USER/Travel-Disk/macOS/README.md << 'EOF'
12
# VeraCrypt for macOS
13
14
No standalone version available.
15
macFUSE 3.10 or newer must be installed too.
16
EOF
Copied!

Windows

There is a portable version available for Windows, so we download the latest stable version and copy it to Travel-Disk/Windows:
1
# Create a Windows directory:
2
mkdir /media/$USER/Travel-Disk/Windows
3
4
# Copy the VeraCrypt Portable exe file:
5
cp ~/Downloads/VeraCrypt*.exe /media/$USER/Travel-Disk/Windows/
6
7
# Create a brief README:
8
cat > /media/$USER/Travel-Disk/Windows/README.md << 'EOF'
9
# VeraCrypt for Windows
10
11
IMPORTANT: DON'T EXTRACT THE APP TO THE USB STICK!
12
13
Because the VeraCrypt driver is not unloaded
14
after exiting VeraCrypt, you won't be able to
15
unmount the stick without a system reboot.
16
17
https://www.veracrypt.fr/en/Portable%20Mode.html
18
EOF
Copied!

Create encrypted partition

Now everything is ready to create the encrypted partition:
    1.
    Start VeraCrypt
    2.
    Go to Tools > Volume Creation Wizard
    3.
    Select Create a Volume within a partition/drive
    4.
    Select Standard VeraCrypt volume
    5.
    In Volume Location, click Select Device...
      then select the previously created, big partition (probably /dev/sda2)
    6.
    Enter the local machine's Administrator password when prompted
    7.
    In Encryption Options make sure to select something different than the defaults
    8.
    Then set your Volume Password
    9.
    Enable Large File support
    10.
    Choose NTFS as the Filesystem Type
    11.
    Enable Cross-Platform Support
    12.
    Format the Volume
    13.
    Click Exit - and you're done

Further Reading

Last modified 7mo ago