VeraCrypt Volume with Cascade encryption (password)

This second level of protection is similar to Lvl 1, but adds multiple encryption algorithms to the volume. This makes it even harder to use brute force methods to gain access to the data. Because multiple encryptions are used to secure the data, setting up or mounting Lvl 2 protection is slower than Lvl 1.

ADVANTAGES:

• Harder to brute force than Lvl 1.
• Low probability of losing access to your data.

RISKS:

• Your data is lost if you lose your password.

1. Open VeraCrypt and click on the Create Volume button (red box).

2. Select the voice Create an encrypted file container (red box), then click on Next (red box).

3. Select Standard VeraCrypt volume in the next window. Click Next to move to the next window.

4. Now you can choose the name of the volume you are about to create and the location where it will be stored. Click on Select File and navigate to where you want your volume to be stored. WARNING: Please keep in mind that selecting an existing file will DELETE it and create a new file (your volume) with the same name!! (blue box).

5. Make sure to select VeraCrypt Volumes (*.hc) in the option Save as type, then click Save. If you wish to hide the fact that the new file is a VeraCrypt volume, leave the Save as type option as it is.

6. The path to your new volume should now appear in the box underlined in blue. Click Next to move to the next window.

7. Now you will have to select what type of encryption you want to have for your volume. To create a cascade encryption for your volume, select AES(TwoFish(Serpent)) as underlined in blue. Should you wish to know more about how the encryption scheme works, please consult the VeraCrypt manual. The Hash Algorithm you want is also shown in the picture and underlined in blue. Click Next if you do not wish to change anything here.

8. You now have to decide how much space you require to store your data. Write the number in the upper red box and make sure that you have the correct unit (KB, MB, GB, TB). Pick a reasonable size that you know you won’t be able to fill when you have collected and analyzed your sample. Click Next to move to the next screen.

​​​​​​​

9. You now need to choose the password for your volume. Read the instructions in the blue box and choose the password accordingly, then click Next. You do not need to tick Use Keyfiles or Use PIM for this level of encryption.

​​​​​​​

1. Should you choose a password that is considered weak, VeraCrypt will prompt you to confirm that you wish to proceed. You can then go back by selecting No and choose a stronger password.

​​​​​​​

10. The next window will ask you to move the mouse inside it in a random pattern in order to make the encryption as hard as possible to crack. We advise you to fill the bar in the blue box fully before proceeding by clicking Format.

​​​​​​​

11. VeraCrypt is now going to create the encrypted volume. Please consider that depending on the size you chose and your machine properties, this will take some time. Once again, select No when prompted by VeraCrypt to disable Windows Fast Startup. We will discuss later how to avoid problems when using VeraCrypt while this feature is enabled.

​​​​​​​

12. Once VeraCrypt is done with the volume creation, this message will appear. Click Ok to finish the installation.

​​​​​​​

13. VeraCrypt will now ask you if you wish to create a new volume. If so, select Next (blue box) and repeat the procedure, otherwise select Exit (red box).

​​​​​​​​​​​​​​