I searched but a Hard overall question remains: So, EFI or MBR or (?) then!?

[Brian Winfield]

Hi!

Before read the below, I developed a better question, maybe it's better than I thought:

Maybe once I encrypt my C partition, which is the only partition I have besides the tiny 100MB one, my whole drive will be encrypted!? Veracrypt says it will encrypt either a partition or drive, but I guess both mean in my case nearly the same thing!?

-------------------------------------------------------------

Original question:

I searched the topics some amount.

I saw (everyone does) the Fully Encrypt the Drive option is greyed out unless you use the old MBR legacy mode. But MBR mode has big downsides.

SO, should I manually encrypt what VeraCrypt didn't? Will my OS encrypt things like temp files, recent places, etc, and my job is to encrypt files manually that I 'can' see? Or is there a better software out there that encrypts everything in Uefi mode?

But then what if the OS part doesn't get all the ex. shell bags? I mean what if I somehow moved my Win7 file folders 3 years ago and now there is shellbags outside the "Encrypted System" - but in a folder I can't see such as under C:\ ? Do I manually place C:\ in a container!?

I want all my data 99.999% private, including the editing/viewing it and even file names. I want the full security deal (lol).