Menu

Help recovering a VeraCrypt volume

Test
2018-12-01
2024-08-08
  • Test

    Test - 2018-12-01

    Greetings everyone. Let's see if you consider that I have any chance to recover a lost volume.

    I have full disk encryption setup for the C unit, and the second drive (D) was also encrypted with the same password and set up as a favorite volume, so it will just mount automatically when Windows boots.

    Long story short, I went to disk management, stupidly right clicked on the D drive, which at that moment was encrypted and mounted, and clicked on "Remove Volume". Oh, the horror, Veracrypt sent me a message and I noticed that I was messing with the wrong disk. Enjoy the rest of your day...

    This is a job workstation and I had no time to lose, so I cloned with DD that entire disk to another hard drive, which I have here. As I understand this is quite tricky, I've not messed again in any way with it, because I want to have very clear steps before doing anything else to avoid irreparable errors. I've been reading some random posts, but I always find some subtle differences that could have a big impact on the process (I don't really know)... so I want to ask before.

    So... anyone would be so kind to suggest me what are the proper steps to follow to try and fix this mess?

    Thank you!

     
  • Enigma2Illusion

    Enigma2Illusion - 2018-12-02

    Since you performed a sector-by-sector clone of the drive, you can try the following on the clone drive so you are not modifying the original drive.

    I believe you can access the data again assuming nothing has overwitten the data.

    Try the following:

    • Dismount the VeraCrypt volume.
    • Use Windows to create a new partition over the existing partition using the exact same size of the original RAW partition.
    • Select the option to NOT format and remove assigning a Windows drive letter.

    .
    The result should be the partition recreated and seen by Windows as RAW instead of NTFS.

    Attempt to mount with VeraCrypt. If mounting fails, attempt to mount using the option of embedded backup header.

    If mounting using the primary header fails, however mounting using the embedded backup header succeeds, you will need to restore the primary header using the embedded backup header in VeraCrypt GUI Tools > Restore Volume Header.

    If you are unable to see or access the files on the mounted VeraCrypt partition, login as the Administrator, open the VeraCrypt GUI, right click on the mounted volume to select repair filesystem option.

    If that fails, the only other idea I can offer is with the volume mounted in VeraCrypt, try using the paid version of data recovery tool EaseUS Data Recovery.

     
    • Mark

      Mark - 2024-08-08

      Hi, I just did exactly the same thing as the OP! I am not an expert user, would you mind elaborating these steps please? My drive is showing as two partitions, one really small one and one with the remaining space. It's an 8TB SSD. Your help is greatly appreciated!

       

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.