| Both sides previous revision Previous revision Next revision | Previous revision |
| dcc:itsol:veracrypt:precautions [2024/07/23 08:34] – Added sections: hibernation, sync giulio | dcc:itsol:veracrypt:precautions [2025/04/01 11:56] (current) – removed reference to Lv4 protection giulio |
|---|
| ===== Security requirements and precautions ===== | ===== Security requirements and precautions ===== |
| |
| **IMPORTANT**: Please take into account that you can use VeraCrypt yourself up to what we call Lvl 3 Protection without the risk of losing important data or access to your system. As long as you follow the encryption guide provided here and are careful about the things we warn you about, you should not need assistance in setting this up. | **IMPORTANT**: Please take into account that you can use VeraCrypt yourself at any level of protection suggested in this guide. The risk of losing important data is mainly linked to losing your password or your keyfiles. As long as you follow the encryption guide provided here and are careful about the things we warn you about, you should not need assistance in setting this up. |
| |
| From Lvl 4 Protection onwards, we suggest that you **talk to someone at the DCC** for assistance. These higher levels of protection ensure that your data is harder to find and leaves less traces, but they also carry the risk of **losing data by overwriting it** or **losing access to your operating system, IF THEY ARE SET UP INCORRECTLY**. You will also have to be told about clear practices that you need to follow in order to ensure **plausible deniability and the best level of protection**. | This guide advises you on a level of protection that is ultimately just a suggestion. You can decide to get higher protection for your data, of course. Be aware, once again, that in getting a higher protection level the risk you face shifts from data leakage to actual data loss. We would ask that you follow our guidelines unless you really need a higher level of protection for your data, in which case you should request a consultation with us. |
| | |
| In our consultation with you we have advised you on a level of protection that is ultimately just a suggestion. You can decide to get higher protection for your data, of course. Be aware, once again, that in getting a higher protection level the risk you face shifts from data leakage to actual data loss. We would ask that you follow our guidelines unless you really need a higher level of protection for your data, in which case you should request a follow up consultation with us. | |
| |
| In order for VeraCrypt to provide effective security, the user needs to be aware and follow a number of guidelines that are listed here in short form and in their entirety in the VeraCrypt manual. Please refer to the VeraCrypt manual (pp.90-99 in the pdf or the [[https://www.veracrypt.fr/en/Security%20Requirements%20and%20Precautions.html| Security requirements and precautions]] section of the online documentation) for a more detailed explanation. | In order for VeraCrypt to provide effective security, the user needs to be aware and follow a number of guidelines that are listed here in short form and in their entirety in the VeraCrypt manual. Please refer to the VeraCrypt manual (pp.90-99 in the pdf or the [[https://www.veracrypt.fr/en/Security%20Requirements%20and%20Precautions.html| Security requirements and precautions]] section of the online documentation) for a more detailed explanation. |
| ++++ Click to display step-by-step guide | | ++++ Click to display step-by-step guide | |
| |
| - Mount your VeraCrypt volume on an unoccupied drive. {{ :dcc:itsol:veracrypt:new_page_step_1.png?direct&800 | }} | - Mount your VeraCrypt volume on an unoccupied drive. {{ :dcc:itsol:veracrypt:new_page_step_1.png?direct&650 | }} |
| - Navigate to the //My Computer/My PC// icon, right-click and select //Properties// from the drop-down Menu. {{ :dcc:itsol:veracrypt:new_page_step_2.png?direct&800 | }} | - Navigate to the //My Computer/My PC// icon, right-click and select //Properties// from the drop-down Menu. {{ :dcc:itsol:veracrypt:new_page_step_2.png?direct&700 | }} |
| - This will open up the //About// section of the //Settings// Menu. Select //Advanced system settings//. Windows will ask you for permission to change system settings. Select //Yes//. {{ :dcc:itsol:veracrypt:new_page_step_3.png?direct&800 | }} | - This will open up the //About// section of the //Settings// Menu. Select //Advanced system settings//. Windows will ask you for permission to change system settings. Select //Yes//. {{ :dcc:itsol:veracrypt:new_page_step_3.png?direct&800 | }} |
| - The System Properties window will open on the //Advanced// tab, as shown in the picture. Under //Performance//, click the //Settings// button. {{ :dcc:itsol:veracrypt:new_page_step_4.png?direct&800 | }} | - The System Properties window will open on the //Advanced// tab, as shown in the picture. Under //Performance//, click the //Settings// button. {{ :dcc:itsol:veracrypt:new_page_step_4.png?direct&400 | }} |
| - Navigate to the //Advanced// tab once again and under //Virtual memory// click on the //Change// button. {{ :dcc:itsol:veracrypt:new_page_step_5.png?direct&800 | }} | - Navigate to the //Advanced// tab once again and under //Virtual memory// click on the //Change// button. {{ :dcc:itsol:veracrypt:new_page_step_5.png?direct&400 | }} |
| - In the //Virtual Memory// window, first deselect //Automatically manage paging file size for all drives//, then select the drive you mounted the VeraCrypt volume on, select //No paging file// and click the //Set// button. {{ :dcc:itsol:veracrypt:new_page_step_6.png?direct&800 | }} | - In the //Virtual Memory// window, first deselect //Automatically manage paging file size for all drives//, then select the drive you mounted the VeraCrypt volume on, select //No paging file// and click the //Set// button. {{ :dcc:itsol:veracrypt:new_page_step_6.png?direct&400 | }} |
| | |
| ++++ | ++++ |
| |
| - Navigate to the //About// section of the //Settings// menu again and select //Advanced system settings//. | - Navigate to the //About// section of the //Settings// menu again and select //Advanced system settings//. |
| - In the //Advanced// tab, which opens automatically from the previous step, click the //Settings// button in the //Startup and Recovery// section. {{ :dcc:itsol:veracrypt:new_memdump_step_2.png?direct&800 | }} | - In the //Advanced// tab, which opens automatically from the previous step, click the //Settings// button in the //Startup and Recovery// section. {{ :dcc:itsol:veracrypt:new_memdump_step_2.png?direct&400 | }} |
| - In the resulting window, select //(none)// under the //Write debugging information// section. Then click //Ok//. {{ :dcc:itsol:veracrypt:new_memdump_step_3.png?direct&800 | }} | - In the resulting window, select //(none)// under the //Write debugging information// section. Then click //Ok//. {{ :dcc:itsol:veracrypt:new_memdump_step_3.png?direct&400 | }} |
| |
| ++++ | ++++ |
| ++++ Click to display step-by-step guide | | ++++ Click to display step-by-step guide | |
| |
| - Open VeraCrypt and select the //Settings// Menu {{ :dcc:itsol:veracrypt:new_hiber_step_1.png?direct&800 | }} | - Open VeraCrypt and select the //Settings// Menu {{ :dcc:itsol:veracrypt:new_hiber_step_1.png?direct&650 | }} |
| - Select the //Preferences// Menu {{ :dcc:itsol:veracrypt:new_hiber_step_2.png?direct&800 | }} | - Select the //Preferences// Menu {{ :dcc:itsol:veracrypt:new_hiber_step_2.png?direct&650 | }} |
| - Tick the //Entering power saving mode// choice (red box), then confirm your selection by clicking //Ok//. {{ :dcc:itsol:veracrypt:new_hiber_step_3.png?direct&800 | }} | - Tick the //Entering power saving mode// choice (red box), then confirm your selection by clicking //Ok//. {{ :dcc:itsol:veracrypt:new_hiber_step_3.png?direct&650 | }} |
| |
| ++++ | ++++ |
| ++++ Click to display step-by-step guide | | ++++ Click to display step-by-step guide | |
| |
| - Click on //Settings//, as shown in the figure, then select //Preferences...//. {{ :dcc:itsol:veracrypt:tmstamp_1.png?direct&800 | }} | - Click on //Settings//, as shown in the figure, then select //Preferences...//. {{ :dcc:itsol:veracrypt:tmstamp_1.png?direct&650 | }} |
| - A new window will appear. You can then deselect the option in the red box, then click //OK//. VeraCrypt will now update the date the file was modified, intead of preserving the original date. {{ :dcc:itsol:veracrypt:tmstamp_2.png?direct&800 | }} | - A new window will appear. You can then deselect the option in the red box, then click //OK//. VeraCrypt will now update the date the file was modified, intead of preserving the original date. {{ :dcc:itsol:veracrypt:tmstamp_2.png?direct&650 | }} |
| |
| **IMPORTANT**: Please make sure to regularly check whether your synchronized files are indeed what you have been working on. Please do this even if you have followed this guide on how to disable this option. | **IMPORTANT**: Please make sure to regularly check whether your synchronized files are indeed what you have been working on. Please do this even if you have followed this guide on how to disable this option. |