If I do a system only encryption I think my documents can still be recovered from the smaller unencrypted partitions Windows creates correct?
You seem to mean the Windows boot partition? It does not contain user data. To have you user data separated, you have to create a separate partition or use a different drive for this purpose. Windows would still store your user profile (where your personal stuff resides per default) on the system drive, so you would have to migrate that, too. I can't say how, and it might not be possible on your Windows edition (home/pro/etc.)
If you have a separate disk available, it's recommended to use it for daily backups rather than to store the data only at that location.
Last edit: M. O. 2021-06-23
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
boot partition in UEFI mode contains no user data and on all uefi systems partitions has same content !
you can encrypt windows partition and it you want another partition you can encrypy it and add it as system favorites to mount it at boot
two partitions are never encrypted
EFI , used by firmware to boot
Recovery (same content for all systems)
for better security
keep GPT format and secure boot enabled
best regards
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Not encrypted parts of windows are the same on all PC's with windows
so from security point of view no problems, the only thing you can learn from EFI partition
is that veracrypt is used
but you can also see that at boot time from boot list which contains veracrypt entry!
best regards
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Solved
Last edit: Madde 2021-07-04
You seem to mean the Windows boot partition? It does not contain user data. To have you user data separated, you have to create a separate partition or use a different drive for this purpose. Windows would still store your user profile (where your personal stuff resides per default) on the system drive, so you would have to migrate that, too. I can't say how, and it might not be possible on your Windows edition (home/pro/etc.)
If you have a separate disk available, it's recommended to use it for daily backups rather than to store the data only at that location.
Last edit: M. O. 2021-06-23
-
Last edit: Madde 2021-07-04
hello , please read on this forum about this
boot partition in UEFI mode contains no user data and on all uefi systems partitions has same content !
you can encrypt windows partition and it you want another partition you can encrypy it and add it as system favorites to mount it at boot
two partitions are never encrypted
EFI , used by firmware to boot
Recovery (same content for all systems)
for better security
keep GPT format and secure boot enabled
best regards
-
Last edit: Madde 2021-07-04
Not encrypted parts of windows are the same on all PC's with windows
so from security point of view no problems, the only thing you can learn from EFI partition
is that veracrypt is used
but you can also see that at boot time from boot list which contains veracrypt entry!
best regards