OPSEC for password disclosure jurisdictions

General
1

Threat model: average darknet enjoyer

Best combo I can think of is a TailsOS USB and Veracrypt with hidden volume to store secrets, however the wear-leveling on modern USBs could impact plausible deniability.

There has to be a way to be totally bulletproof in providing a password in a situation under duress while protecting yourself.

Is there a way to conceal an entire OS? Like have QubesOS in a hidden Veracrypt volume or something?

Things would be so much more simple in this regard just living in the US. Set a strong passphrase and boom that’s it.

2

I wouldn’t store sensitive data locally if you’re that concerned.

The Opsec Bible has a workflow for deniability but I can’t vouch for it.

3

No.

No, someone with enough knowledge will always find the hidden volume.