With Veracrypt, they give you the chance to encrypt the USB. Should you do this or just rely on encrypted volumes? use them as needed and then wipe them from there to transport data between computers? and have keyfiles if needed. I mean if you only need to transport small documents, isn’t it overkill to encrypt a whole USB? no data can leak since the volumes are never decrypted inside the USB
What are you trying to accomplish here at large? I feel like Cryptomator would work just as well and will be a simpler option.
I like the idea of encrypting the entire pendrive since flash memory devices can’t be safely/reliably wiped, but at least you can forget/delete the key to decrypt it so the data is useless to others.
2 Likes
What veracrypt settings do you recommend for full usb encryption? typically i would use sha512, aes256 cascaded algo with 2 other algos, and max out the entropy with mouse movements.
The default settings are fine but you can totally increase the encryption strength if you wish so long as you don’t mind a potential hit to performance.