So you recommend leaving the default settings for the keyfile creation?
There’s a video on youtube called “Veracrypt Keyfiles and PIM Tutorial | Protect Your Encrypted Data” by “KMDTech” and he changes the default “keyfiles size” from 64 to 1024. I left it at 64. Should I recreate the keyfile with 1024? I guess I will need a new volume.
He also adds an additional 2 keyfiles, an image and audio file. I guess this is overkill and with the randomly generated keyfile is enough, I mean you don’t want those files corrupted and the more keyfiles the higher chances that happen.
And he also adds the PIN as well. I guess this is also not needed with a strong 64+char password and the keyfile. Btw, does veracrypt support 128 char password? There’s some wierd thing I keep reading, about how this works for windows for some reason but for not linux, but I think I tried yesterday with a 128 char password and it did work so maybe they have fixed this.
Then the other question would have been, what about the hashing algorithm for the volumes? Thoughts on cascaded algos? aes+2fish+serpent one sounds good.