Making a Secure Digital Vault

I thought I would share the basics of creating a secure digital vault using the veracrypt software. I’ve used it for several years to create digital vaults for myself and my family. it’s a powerful encryption software, and very versatile, but not entirely straightforward.

Properly set up, the vault will protect your data from almost anything.

And if you feel this is a worthy instructible, I would appreciate a vote in the safety and security contest.

Choose a flash drive. (I really like the low profile ones).

it’s best to start with a freshly formatted drive, though a half-full drive still works, or an older model.

The low profile ones are less likely to be damaged while in the computer (I've had drives snapped off, or bent while in the computer, and heard of worse, like snapping off the connector from the motherboard)

Download Veracrypt portable version (which is free, and open source)

https://www.veracrypt.fr/en/Downloads.html

copy the EXE to your flash drive (I've named my flash drive examplevault)

select the language
(I'm using English, since that’s the language this instructible is written in)

click past the usual license stuff (URRRG!)

make sure the install directory is set to the letter of your flash drive, and extract the software

wait for it to extract. yeah, just wait. it shouldn't take long

all files have extracted, and the software is on our flash drive. Now time to begin the hard part, setting up the secure container

it may auto-popup the new folder, or you may have to open it. Ether way, you’ll see a bunch of confusing stuff, and several exicutable (.exe) files.

Click on veracrypt.exe

allow the media to run (you really thought something cool could be done without admin permissions?) and you reach the veracrypt screen

you have reached the veracrypt screen at last.

now click on create volume

check create an encrypted file container

Select standard Veracrypt volume (hidden volumes are cool, but WAY more than you will ever need).

for volume location, tell it the root of the flash drive (if you want to be extra sneaky, add some folders to the flash drive and name it something innocent-sounding inside one of those) for now, we’ll name it vault

pick an encryption algorithm...or three. Yes, Veracrypt lets you do that :)

don’t use the default AES method. it’s secure enough (it’s used for top secret material) but this is a digital VAULT.

pick a hash algorithm (RIPEMD-160 or Whirlpool are the best. The others carry the stain of NSA development…)

Pick the size of your file container (1GB should be enough for text files, but pick two or three if you’re saving PDFs.) don’t try and make anything bigger than the (helpfully listed) available space. If you do it will end in nightmares.

Click next!

Next comes picking a password. I won’t say much on this, as passwords are tricky, personal subjects. I recommend some sort of memorable phrase pulled from a book you will keep, but don’t much like. Also, there are many good automatic password generators.

Please don’t use the same password you use ANYWHERE else! For now I will just use “Pick a Good Password Every1!” as a reminder to us all.

You need capital, lowercase letters and numbers before the software will even let you try to make a container (the software is wise) also, it accepts up to 64 character passwords, and I recommend using all of that.

Now it will ask you to move the mouse randomly around the screen. do so until the bar fills up. You can start when the bar goes green, but why have lesser security?

Now click format, and wait. This will take a bit, be patient. Even after it’s done formatting the new volume, as our vault is called, it will take a minute

Congratulations, you can now exit the creation wizard.

Now the volume is created, but there’s nothing in there.

From veravrypt, select a drive letter you aren't using. Something like “w:”, then select the file we just created by clicking the select file button, then click open

now click on the big "Mount" button

Well, enter your password

Wait, while the vault opens….

Now go into the address bar and type in “w:” or your chosen drive letter.

(or just click on it in the sidebar)

here’s our nice shiny new vault!

Now fill it up with things worthy of protecting…. :)

You can click and drag, or simply copy/paste to the vault.

and now it’s time to close the vault. Close the window, then go to the veracrypt window, and click on Dismount All

With the vault closed, click on Exit.

And congratulations, your documents are now safe inside a powerfully encrypted vault with a strong password. Enjoy.

And remember that password. This isn’t a website. A forgotten password means those documents are gone forever. So REMEMBER THE PASSWORD!

disclaimer: (it's a sad world that needs these) anything you do with these instructions and software is your fault, not mine, I'm not to blame if you loose your password, or encrypt things you shouldn't have.

Anyone have tricks, comments, security tips I missed, maybe even mistakes you spotted? Let me know down in the comments, and thanks for reading!