A locked volume for documents you keep
VeraCrypt protects stored information by putting it inside an encrypted volume. A common starting point is a container: one file on an ordinary drive that opens as a separate drive letter after you enter its password. While that volume is mounted, you can work with documents using your normal applications. Dismounting it closes that access.
The project distributes the software free with published source code. It also supports encryption of suitable partitions and devices, and system encryption in supported Windows configurations. Those options involve different preparation and recovery considerations. For learning the workflow, a small standard container containing unimportant test files is easier to understand than changing the entire system drive.
Download the build for your machine
The current Windows release supports Windows 10 from version 1809 and Windows 11 on x64 or ARM64. Windows Server support starts at 2019 on x64. Old tutorials describing Windows 7 or a 32-bit installer refer to earlier releases; do not treat them as requirements for this download. The official page also provides distinct macOS and Linux packages.
Choose the Windows installer that matches the processor, obtain it through the project's download page and follow its installation prompts. Signature and checksum information is provided there for verification. The portable package is a separate choice, not a way to avoid all driver or administrator requirements on a locked-down computer.
Create a small volume first
- Launch the volume creation wizard and choose a standard encrypted file container.
- Select a new destination file, keeping it separate from documents you already need.
- Choose an adequate size and a strong password that you can retain securely.
- Mount the finished volume, copy a few test files and confirm they open normally.
- Close those documents, dismount the volume and test opening it again.
The container's filesystem affects file-size limits and compatibility. Choose it for the computers where you intend to open the volume, rather than assuming that every filesystem works everywhere. Keep the password, and any additional credentials you choose to use, separate from the encrypted data. Losing a required keyfile can be as serious as forgetting the password.
Understand when protection applies
Mounted files are available to applications running with the relevant access. Encryption does not make a compromised Windows session safe, prevent every temporary copy created by an editor or replace malware protection. Close applications before dismounting, and check whether the originals remain outside the volume after you copy documents into it. A copied file does not disappear from its old location automatically.
Preserve a recoverable copy
Encryption and backup solve different problems. Keep another verified copy of important data and use the documented volume-header backup features where appropriate. A header backup cannot recover a forgotten password. Back up a container in a consistent, dismounted state rather than assuming a copy made during active changes will be dependable.
Duplicati can handle scheduled encrypted backups when the task is retaining recoverable versions elsewhere. FreeFileSync is useful for comparing and copying selected folders, but its ordinary copies are not automatically VeraCrypt volumes. Decide whether you need an encrypted workspace, a backup history or both, and test restoration before relying on the arrangement.