Skip to main content

Creating an Encrypted Volume with a Hidden Volume on Windows

An Encrypted Volume with a Hidden Volume, as implemented in Veracrypt, is a technique used to create two layers of encryption within a single container file or disk partition.

The Outer Volume is the primary encrypted volume that is visible and accessible upon mounting with a specific password. The outer volume contains data that you're comfortable revealing or sharing when compelled to provide access.

The Hidden Volume is nested within the outer volume, and is a second layer of encrypted storage that remains concealed unless accessed with a separate, distinct password. The existence of the hidden volume is indistinguishable from random data or noise to anyone examining the outer volume.

Download the Portable Version

One of the easiest way to get started with Vercrypt on Windows is to use the portable version. Visit the office Veracrypt website (https://www.veracrypt.fr/en/Downloads.html) and download the portable version for Windows.

Screenshot_2024-05-04_205833.png

Running the Portable Version

Launch the Veracrypt application. Click on Create Volume in the Veracrypt main window.

Screenshot_2024-03-28_100943.png

Select Encrypt a non-system partition/drive and click Next.

Screenshot_2024-03-28_101358.png

Select Hidden VeraCrypt Volume and click Next.

Screenshot_2024-03-28_101432.png

Select Normal Mode and click Next

Screenshot_2024-03-28_101449.png

Click Select Device to open up the device selection menu. If you have not already plugged in the storage drive that you want to encrupt, plug it in now to your Windows system. 

Screenshot_2024-03-28_101608.png

Select the stroage device, and click Ok.

Screenshot_2024-03-28_101940.png

Select Next. We will be creating the Outer Volume now. 

Screenshot_2024-03-28_102219.png

AES is an modern encryption standard that is supported on many modern platforms. Default to AES unless your hardware does not have hardware AES support.

You can click on Test to see which Encryption Algorithm is supported by your hardware. 

Test which which Encryption Algorithm is supported by your hardware

Screenshot_2024-05-04_211725.png

Click Auto-Test All. 

Screenshot_2024-05-04_211758.png

If your hardware supports the encryption algorithms, you will see a green check mark for passing. 

Screenshot_2024-05-04_211816.png

You can use the Benchmark option to test how your fast your system will handle the encryption or decryption workloads. 

Encryption/Decryption Benchmark

Screenshot_2024-05-04_212100.png

Choose a Buffer Size, and click Benchmark

Screenshot_2024-05-04_212133.png

After a bit, you will see the speed result. Below are the results from my AMD 5950X system with all 32 threads utlized, across different buffer sizes. 

Screenshot_2024-05-04_212147.png

Screenshot_2024-05-04_212203.png

Screenshot_2024-05-04_212223.png

Click Next to continue. 

Screenshot_2024-03-28_102449.png

You will see the size of your storage drive. If the size is correct, click Next to continue. 

Screenshot_2024-03-28_102551.png

Enter a strong password for the Outer Volume. Click Next.

Screenshot_2024-03-28_103101.png

Decide if you want large file size support for the Outer Volume. This is only for individual large files. 

Screenshot_2024-03-28_103924.png

If you do have single files that are 4GB or larger, you will need to choose NTFS file system in the next step.

Screenshot_2024-03-28_104034.png

Select the NTFS as the file system, and Full Format

Screenshot_2024-03-28_104758.png

Click Yes to continue. 

Screenshot_2024-03-28_104826.png

Confirm that you want to full format the drive. 

Screenshot_2024-03-28_104845.png

Confirm once more that you want to continue to Full format the drive. 

Screenshot_2024-03-28_104912.png

The system will now format the whole drive. Depending on the drive speed, this may take a long time. 

Screenshot_2024-03-28_104937.png

Screenshot_2024-03-28_131822.png

Screenshot_2024-03-29_013531.png

Once the format is completed, click Next

Screenshot_2024-03-29_013705.png

We will now set up the Hidden Volume. 

Screenshot_2024-03-29_013902.png

Similar to the Outer Volume settings, select AES as the encryption and continue. 

Screenshot_2024-03-29_013914.png

Specify the size for the hidden volume and click Next.

Screenshot_2024-03-29_013938.png

Enter a strong password for the hidden volume. Click Next.

Screenshot_2024-03-29_014015.png

Similar to the Outer Volume, select if you want large file support. Generally speaking, Hidden Volume probably does not need large file support. 

Screenshot_2024-03-29_014032.png

If you do not need large file support, then you can use exFAT for the filesystem for greater flexibiltiy. Click Format to continue. 

Screenshot_2024-03-29_014104.png

Screenshot_2024-03-29_014126.png

Hidden Volume cannot share the same drive letter as the Outer volume. 

Screenshot_2024-03-29_014142.png

Screenshot_2024-03-29_014204.png

That's it! The Hidden Volume is now created. 

Screenshot_2024-03-29_014214.png

You can now proceed to mount and use your newly created, encrypted drive.