Question about encrypting in-place for non-system drives
Open source disk encryption with strong security for the Paranoid
Brought to you by:
idrassi
Menu
▾
▴
Why is it that VeraCrypt is capable of encrypting a system drive in place while the operating system is still fully functional, but to do it to a non-system drive requires unmounting?
Why can VeraCrypt not encrypt a non-system drive in place while it remains fully functional as well?
You question is confusing because
"but to do it to a non-system drive requires unmounting?"
If you have a non system drive and it requires unmounting , that would mean it is encrypted.
On the main screen click on Create Volume -> 2nd option Encrypt a non-system partion /drive.
Last edit: Philip Smith 2020-01-03
Yes, but when you do that, it warns you that the drive will be unmounted and unavailable until encryption is complete. That's the issue in question.
I would say the unmounting just means you can't use it even in windows explorer.
To me I would not do it that way you want. personel opinion only.
I would move all the files off the partition then encrypt it then move the copy the files back. That way there will not be any problems when you move them use a program that verifies the files it moves.
Also I would NEVER have only one set of files it is best to have another just in case something happens
I have encrypted drives not the C drive these drives are backed up to 2 seperat encrypted portable drives kept in seperate places.
Last edit: Philip Smith 2020-01-03
This isn't about best practices.
My question is - if VeraCrypt is technically capable of encrypting a system drive in place while keeping it fully useable, why can't it do the same for a non-system drive?
Quote "This isn't about best practices." You are right, forgive me for trying to help by suggesting a possibly better way.
I will leave it to someone else who may be able to answer your question, the answer will probably be along the lines of why can't you delete a file while you are using that file.
Watch a video file or listen to an audio file while you are doing that try to delete it windows won't let you because it is in use.
Therefore if you are trying to encrypt a file at the same time your computer is using that file nothing will happen or you will get a corrupted file or a possible crashed computer.
You're not making any sense.
When you encrypt in-place a system drive, you can use it fully - meaning the operating system is fully functional creating, renaming, copying, deleting files all the time. You can also manually create, rename, copy, move, and delete files as much as you want - and VeraCrypt will have no problems whatsoever.
Therefore, I'm trying to find out why VeraCrypt can't do the same thing for non-system drives.
And although I appreciate your trying to suggest a different approach, it neither answers my question nor does it apply to my case because the non-system drives in question have applications installed on them, so it's not as simple as copying everything off and then copying it back.