I'd like to encrypt the my system drive that my OS is on. This is my only computer, so I was wondering if encrypting it would prevent me from using it, presumably for days.
I've tried encrypting an external drive and I couldn't access it until it was done. But maybe I chose the wrong settings.
Is there a workaround? Like, maybe I can create a complete copy of my system drive and encrypt the original while using the other? I have no experience doing this. Just an idea.
Thank you for any help or advice :)
2 Answers
Boot volume encryption is different than regular disk encryption. Veracrypt will first install its bootloader and reboot using it, asking you for password for the first time. The encryption will then begin on a live system. Performance will be degraded, but the computer will be usable. This video shows the entire procedure. It's slightly dated, but still accurate even on Windows 10 systems.
But crucially, it's absolutely necessary to make a full disk backup before the encryption. If the process is interrupted it may lead to loss of data and VC-encrypted disks are difficult (and/or expensive) to recover data from. So your idea of making a copy beforehand is spot-on, even if not for the right reason.
LPChip's advice in the other answer is also good: if you have a Pro edition of Windows, I'd recommend using Bitlocker rather than Veracrypt. It's easier to use, works with TPM (safely removing the need for manual password entry), has better compatibility and lets you upgrade Windows without jumping through extra hoops.
Your experiment told you all you need to know.
During the encryption process, the drive cannot be used. Given it is your OS drive, the entire encryption will happen outside of windows, so windows cannot be used either.
In essence you cannot use your computer while the encryption is on-going.
Keep in mind that an external drive is usually quite a bit slower than an internal drive, so it might be that the encryption process only takes an hour or so, not a whole day.
That said, You can use Windows' built-in bitlocker feature to encrypt your disk, and unlike veracrypt, this encryption feature happens in the background and windows can be used. It will however tie the decryption process to your user account, so anyone with the password of your user can also access your data. But if you take out the harddrive without the computer, your data is safe.
5
