This can be found in: VeraCrypt Settings – Preferences – More settings – Performance/Driver Configuration and check Activate encryption of keys and passwords stored in the RAM box is selected.
Wonder why this isn’t enabled by default?
I would assume there would be some performance, but i cannot find it in the documentation, it does mention that its not compatiable with Hibernation and FastStartup though.
So i think it makes sense that its disabled by default, making it easy enable for those with a threatmodel that requires it. I mean, cold boot attacks aren’t exactly a common threat.
I assume this means while on your session/logged in, you only have to put in your password once to access your container?