in this video, we're going to talk about veracrypt and luke's encrypted volumes.
now both of these are types of implementations to allow for full disk encryption.
so these are the actual hard drives that are on your computer or the usb storage device you have tails installed on.
so let's explore a little bit about these before we dive into tails.
veracrypt is an open source encryption standard and it's multi- platform.
you can put this on linux, windows, and mac.
it's a tool ready to use.
it's used for storage drives or external storage drives, and it helps secure your sensitive data and very easy to use.
essentially, if someone took out your hard drive on your computer, it would be encrypted, meaning they would need that password or some way to decrypt that volume before reading what data was on that hard drive.
comparably, if you don't have encryption on and you have a computer and someone takes that hard drive out, they can read it without needing to do anything.
so you want to make sure you're always encrypting your volumes.
now mac devices and windows devices nowadays all come with encryption built in.
windows has its own version of encryption and mac as well will encrypt your volumes using information like your apple id with its file vault applications.
so those two are already used on those platforms, but if you want an open source one that can be used across multiple platforms, that's where veracrypt would come in.
now veracrypt does differ from luke's a little bit.
this is native to linux itself.
you can do full disk encryption on linux.
tails comes with luke's built in and because we set up tails with persistence and that administrative password, we've actually already set up luke's and we can go take a look at that right now.
okay so here on tails if you want to see information about your disks that are installed you can actually just type in the activity window disks and there you'll see a graphical user interface that points to information about the devices and disks you have on your pc.
so this pc that i'm using plugged in has a 256 gigabyte disk that has partitions on it.
now tails is not using or running on any of this.
tails is actually running off of this usb drive right here.
and you can see right here our persistent volume, right tails is installed right here on the partition one, but then we have the tails data volume right here, partition two, which is the luke's volume.
you can see it right there.
it says luke's encryption version two.
right now it is unlocked because we had to unlock it when we logged in.
that's that entering the password when you log in that we showed earlier in the course.
so this is already encrypted and ready to go.
you already have the luke's encryption set up.
now you could change this if you need, but you can also go here and we can delete this partition on this drive and set up luke's encryption on it if we wanted to.
if we wanted to do that, we would have to format the disk, which i'm not going to do so in this video because i want to keep what's on there.
but that's how you would do it.
you just format the disk and then when you repartition it, you just add encryption.
now we're not going to dive much deeper in this course on partitioning and encryptions.
if you want to learn more about that, we're going to make a separate course on like encryption and cryptography as a whole, especially in tails and tor and all of those tools.
so if you're interested to learn more there, check that out.
but otherwise tails, you already have encryption, you already have luke's when you set up the persistence, so there's not much work needed to be done.
but it is important you understand the concepts of luke's and what veracrypt is and their general purpose, which is just full disk encryption.
if you have any questions, let me know.
otherwise, we'll see you in the next one.