{"slug": "veracrypt", "name": "VeraCrypt", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 7, "commenters": 20, "warners": 5, "score": 3.913, "rising": -2.29, "first": "2026-01-23", "latest": "2026-10-30", "why": "Veracrypt was independently audited, even by German BSA [1] and no serious problems were found.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 7, "neutral": 8, "compare": 1, "warn": 7}, "spark": [0, 0, 2, 0, 0, 1, 1, 0, 3, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Veracrypt was independently audited, even by German BSA [1] and no serious problems were found.", "kind": "", "icon": true, "domain": "veracrypt.io", "github_repo": null, "official_url": "https://veracrypt.io", "pricing": "", "aliases": ["VeraCrypt"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 785015488, "item_id": 49063468, "url": "https://news.ycombinator.com/item?id=49063468", "by": "Grimblewald", "date": "2026-07-26", "version": null, "stance": "recommend", "quote": "VeraCrypt has a cool function which is a reserved space for a decoy OS.", "excerpt": "VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load. Something like this may need to become the standars over duress pins which sho", "context": "", "use_case": "Hidden OS decoy volumes", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 780348496, "item_id": 48771781, "url": "https://news.ycombinator.com/item?id=48771781", "by": "saidnooneever", "date": "2026-07-03", "version": null, "stance": "recommend", "quote": "happy it got restored and there remains an alternative to butlocker", "excerpt": "aah cool, thank you..100% missed the update :). thanks! thats good to read honestly lol. not that i use windows much but i felt it was MS trying to undermine it. happy it got restored and there remains an alternative to butlocker.", "context": "", "use_case": "disk encryption", "switched_from": "", "story": "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory"}, {"id": 780232896, "item_id": 48764556, "url": "https://news.ycombinator.com/item?id=48764556", "by": "snailmailman", "date": "2026-07-02", "version": null, "stance": "recommend", "quote": "it was resolved within a few days", "excerpt": "Assuming this is what you are referring to, it was resolved within a few days. The incident being resolved just didn't make headlines. https://sourceforge.net/p/veracrypt/discussion/general/thread/9620d7a4b3/?page=1#43c0", "context": "", "use_case": "", "switched_from": "", "story": "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory"}, {"id": 770742976, "item_id": 48171436, "url": "https://news.ycombinator.com/item?id=48171436", "by": "Hypomixolydian", "date": "2026-05-17", "version": null, "stance": "recommend", "quote": "Veracrypt was independently audited, even by German BSA [1] and no serious problems were found.", "excerpt": "How so? Veracrypt was independently audited, even by German BSA [1] and no serious problems were found. [1] https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Veracrypt/Veracrypt.pdf", "context": "", "use_case": "Encrypting disks and volumes", "switched_from": "", "story": "Security researcher says Microsoft built a Bitlocker backdoor, releases exploit"}, {"id": 763382896, "item_id": 47711431, "url": "https://news.ycombinator.com/item?id=47711431", "by": "fuckinpuppers", "date": "2026-04-09", "version": null, "stance": "recommend", "quote": "But I still like it for containers", "excerpt": "Hopefully this is just boot issues, and not VC in general moving forward for now. I just centralized on leveraging VC for container encryption. I actually moved away from VC back to Bitlocker for FDE just a couple weeks ago (I forget the exact reasons why) But I still like it for containers, and I hope they can figure out a way to get it fixed for VC and WireGuard or they can figure out alternate signing options and ", "context": "", "use_case": "container encryption", "switched_from": "", "story": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 790322160, "item_id": 49395135, "url": "https://news.ycombinator.com/item?id=49395135", "by": "Cider9986", "date": "2026-08-21", "version": null, "stance": "warn", "quote": "Not physically possible[1] to be deniable and a bad[2] idea.", "excerpt": "Not physically possible[1] to be deniable and a bad[2] idea. [1] https://veracrypt.io/en/Wear-Leveling.html https://veracrypt.io/en/Trim%20Operation.html [2] https://nitter.net/GrapheneOS/status/2082153517234676150#m", "context": "", "use_case": "Disk encryption", "switched_from": "", "story": "Felony charges for citizen deleting phone data at US Border"}, {"id": 785455856, "item_id": 49090991, "url": "https://news.ycombinator.com/item?id=49090991", "by": "Cider9986", "date": "2026-07-28", "version": null, "stance": "warn", "quote": "Due to low level SSD architecture[1] and other reasons it is detectable:", "excerpt": "Due to low level SSD architecture[1] and other reasons it is detectable: https://nitter.net/GrapheneOS/status/2082153517234676150#m [1] https://veracrypt.io/en/Trim%20Operation.html https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785204368, "item_id": 49075273, "url": "https://news.ycombinator.com/item?id=49075273", "by": "greyface-", "date": "2026-07-27", "version": null, "stance": "warn", "quote": "you must not use VeraCrypt to encrypt any part of", "excerpt": "The VeraCrypt documentation disagrees with you: > If you need plausible deniability, you must not use VeraCrypt to encrypt any part of (or create encrypted containers on) a device (or file system) that utilizes a wear-leveling mechanism. https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785022896, "item_id": 49063931, "url": "https://news.ycombinator.com/item?id=49063931", "by": "bb88", "date": "2026-07-26", "version": null, "stance": "warn", "quote": "This is always been the dumbest thing about \"hidden volumes\"", "excerpt": "This is always been the dumbest thing about \"hidden volumes\": It relies upon your adversary not knowing about veracrypt's hidden volume. Which BTW, is plainly ADVERTISED on the web site. The second he knows you have veracode, he will ask for the other encrypted volume. See also relevant XKCD: https://xkcd.com/538/", "context": "", "use_case": "Disk encryption", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}]}], "who": [], "tags": [], "use_cases": ["disk encryption", "encrypted drives", "hidden os decoy volumes", "hidden-volume encryption", "encrypting disks and volumes", "container encryption"], "compared": [{"slug": "truecrypt", "name": "TrueCrypt", "co": 4, "switched_from": 1, "switched_to": 0}, {"slug": "bitlocker", "name": "BitLocker", "co": 3, "switched_from": 0, "switched_to": 1}, {"slug": "luks", "name": "LUKS", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49063022", "title": "US citizen charged after GrapheneOS phone wipes during airport search", "mentions": 6}, {"url": "https://news.ycombinator.com/item?id=49055169", "title": "GrapheneOS protections against data extraction from locked devices", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=46735545", "title": "Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=48763035", "title": "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48168856", "title": "Security researcher says Microsoft built a Bitlocker backdoor, releases exploit", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47690977", "title": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates", "mentions": 2}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"warn": 2, "neutral": 1, "recommend": 2}, "2026-02": {"neutral": 1}, "2026-03": {}, "2026-04": {"neutral": 2, "recommend": 1}, "2026-05": {"warn": 1, "recommend": 1}, "2026-06": {"compare": 1}, "2026-07": {"recommend": 3, "warn": 3, "neutral": 1}, "2026-08": {"warn": 1}, "2026-09": {"neutral": 1}, "2026-10": {"neutral": 2}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 804986161, "item_id": 50311635, "url": "https://news.ycombinator.com/item?id=50311635", "by": "arjie", "date": "2026-10-30", "version": null, "stance": "neutral", "quote": "VeraCrypt's license still includes him", "excerpt": "This is the TrueCrypt guy. Sometimes it feels like I just missed out on big history. VeraCrypt's license still includes him: https://veracrypt.io/en/VeraCrypt%20License.html What on earth, man. I remember the name being familiar for software reasons back in the 2000s because a bunch of people were talking about TrueCrypt back then and not trusting anonymous software and this and that. He became a crime boss? This is ", "context": "", "use_case": "", "switched_from": "", "story": "An Arrogant Way of Killing (2016)"}, {"id": 801846339, "item_id": 50115396, "url": "https://news.ycombinator.com/item?id=50115396", "by": "Steve44", "date": "2026-10-16", "version": null, "stance": "neutral", "quote": "I since moved to TrueCrypt and now onto Vercrypt", "excerpt": "I used it for a little while and Turnpike email software from the UKs Demon Internet integrated it pretty well. The problem was only one other person I knew actually used it, it didn't really have a justifiable use for most people. I did use the encrypted mountable drives for a while, that worked very well. I since moved to TrueCrypt and now onto Vercrypt and haven't used a PGP product for probably over 15 years. Sha", "context": "", "use_case": "encrypted drives", "switched_from": "TrueCrypt", "story": "Why I Wrote PGP (1991, revised 1999)"}, {"id": 796171776, "item_id": 49760736, "url": "https://news.ycombinator.com/item?id=49760736", "by": "Cider9986", "date": "2026-09-18", "version": null, "stance": "neutral", "quote": "it's not possible according to Veracrypt", "excerpt": "It's a bad idea because of the increased attack surface even if it was possible and it's not possible according to Veracrypt [1]. It would quickly become a known feature document in guides regularly updated and handed to law enforcement. Forensic tools would also add detections. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&query=by%3Agrapheneos%20ssd&sort=byDate&type=comment [1] https://veracrypt.io/en/We", "context": "", "use_case": "Disk encryption", "switched_from": "", "story": "Border agents can search cellphones without a warrant or reasonable suspicion"}, {"id": 790322160, "item_id": 49395135, "url": "https://news.ycombinator.com/item?id=49395135", "by": "Cider9986", "date": "2026-08-21", "version": null, "stance": "warn", "quote": "Not physically possible[1] to be deniable and a bad[2] idea.", "excerpt": "Not physically possible[1] to be deniable and a bad[2] idea. [1] https://veracrypt.io/en/Wear-Leveling.html https://veracrypt.io/en/Trim%20Operation.html [2] https://nitter.net/GrapheneOS/status/2082153517234676150#m", "context": "", "use_case": "Disk encryption", "switched_from": "", "story": "Felony charges for citizen deleting phone data at US Border"}, {"id": 785455856, "item_id": 49090991, "url": "https://news.ycombinator.com/item?id=49090991", "by": "Cider9986", "date": "2026-07-28", "version": null, "stance": "warn", "quote": "Due to low level SSD architecture[1] and other reasons it is detectable:", "excerpt": "Due to low level SSD architecture[1] and other reasons it is detectable: https://nitter.net/GrapheneOS/status/2082153517234676150#m [1] https://veracrypt.io/en/Trim%20Operation.html https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785204368, "item_id": 49075273, "url": "https://news.ycombinator.com/item?id=49075273", "by": "greyface-", "date": "2026-07-27", "version": null, "stance": "warn", "quote": "you must not use VeraCrypt to encrypt any part of", "excerpt": "The VeraCrypt documentation disagrees with you: > If you need plausible deniability, you must not use VeraCrypt to encrypt any part of (or create encrypted containers on) a device (or file system) that utilizes a wear-leveling mechanism. https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785163777, "item_id": 49072736, "url": "https://news.ycombinator.com/item?id=49072736", "by": "Cider9986", "date": "2026-07-27", "version": null, "stance": "neutral", "quote": "Here's some info from veracrypt on the SSD level.", "excerpt": "Grapheneos comment on hidden profiles/veracrypt style plausible deniability: >It's possible to make a semi-hidden feature but hiding it well enough to avoid detection by software forensic tools requires not basing it around profiles. It would really need to be a nested GrapheneOS in a virtual machine. It could also still be detected at an SSD level https://nitter.net/GrapheneOS/status/2081471477174456340#m Here's som", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785154416, "item_id": 49072151, "url": "https://news.ycombinator.com/item?id=49072151", "by": "Cider9986", "date": "2026-07-27", "version": null, "stance": "neutral", "quote": "", "excerpt": "It's not possible afaict on phones because they use flash memory. https://veracrypt.io/en/Wear-Leveling.html https://veracrypt.io/en/Trim%20Operation.html", "context": "", "use_case": "", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785094112, "item_id": 49068382, "url": "https://news.ycombinator.com/item?id=49068382", "by": "Cider9986", "date": "2026-07-27", "version": null, "stance": "neutral", "quote": "", "excerpt": "That's on HDDs, phones don't use HDDs. We already did this [1]? [1] https://news.ycombinator.com/threads?id=Cider9986#49058421 https://veracrypt.io/en/Trim%20Operation.html https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "GrapheneOS protections against data extraction from locked devices"}, {"id": 785022896, "item_id": 49063931, "url": "https://news.ycombinator.com/item?id=49063931", "by": "bb88", "date": "2026-07-26", "version": null, "stance": "warn", "quote": "This is always been the dumbest thing about \"hidden volumes\"", "excerpt": "This is always been the dumbest thing about \"hidden volumes\": It relies upon your adversary not knowing about veracrypt's hidden volume. Which BTW, is plainly ADVERTISED on the web site. The second he knows you have veracode, he will ask for the other encrypted volume. See also relevant XKCD: https://xkcd.com/538/", "context": "", "use_case": "Disk encryption", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 785015488, "item_id": 49063468, "url": "https://news.ycombinator.com/item?id=49063468", "by": "Grimblewald", "date": "2026-07-26", "version": null, "stance": "recommend", "quote": "VeraCrypt has a cool function which is a reserved space for a decoy OS.", "excerpt": "VeraCrypt has a cool function which is a reserved space for a decoy OS.[1] Everything else registers as free space while decrypting to dummy volume. You make the dummy volume look lived in, and forget. provide dummy password, volume decrypts such that only dummy is accessible/readable. give proper password, real OS and FS decrypt and load. Something like this may need to become the standars over duress pins which sho", "context": "", "use_case": "Hidden OS decoy volumes", "switched_from": "", "story": "US citizen charged after GrapheneOS phone wipes during airport search"}, {"id": 784970224, "item_id": 49060639, "url": "https://news.ycombinator.com/item?id=49060639", "by": "b8", "date": "2026-07-26", "version": null, "stance": "neutral", "quote": "Similar to how I use Veracrypt, but I leave my PC running", "excerpt": "Does it protect it in After First Unlock mode? I often use my device and if I lock it before LE or another bad actor catches it then it's kind of useless if it doesn't protect my data in after first unlock (locked) mode. Especially with LE agencies having tools like Cellebrite at their station for same day analysis. Most people probably won't have time to reboot their device. Similar to how I use Veracrypt, but I lea", "context": "", "use_case": "disk encryption", "switched_from": "", "story": "GrapheneOS protections against data extraction from locked devices"}, {"id": 784934736, "item_id": 49058421, "url": "https://news.ycombinator.com/item?id=49058421", "by": "Cider9986", "date": "2026-07-26", "version": null, "stance": "neutral", "quote": "Not possible to have a robust implementation with the current tech unfortunately.", "excerpt": "Not possible to have a robust implementation with the current tech unfortunately. https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "", "switched_from": "", "story": "GrapheneOS protections against data extraction from locked devices"}, {"id": 784934032, "item_id": 49058377, "url": "https://news.ycombinator.com/item?id=49058377", "by": "Cider9986", "date": "2026-07-26", "version": null, "stance": "warn", "quote": "I mean, so does everyone.", "excerpt": "I mean, so does everyone. https://veracrypt.io/en/Wear-Leveling.html", "context": "", "use_case": "hidden-volume encryption", "switched_from": "", "story": "GrapheneOS protections against data extraction from locked devices"}, {"id": 780348496, "item_id": 48771781, "url": "https://news.ycombinator.com/item?id=48771781", "by": "saidnooneever", "date": "2026-07-03", "version": null, "stance": "recommend", "quote": "happy it got restored and there remains an alternative to butlocker", "excerpt": "aah cool, thank you..100% missed the update :). thanks! thats good to read honestly lol. not that i use windows much but i felt it was MS trying to undermine it. happy it got restored and there remains an alternative to butlocker.", "context": "", "use_case": "disk encryption", "switched_from": "", "story": "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory"}, {"id": 780232896, "item_id": 48764556, "url": "https://news.ycombinator.com/item?id=48764556", "by": "snailmailman", "date": "2026-07-02", "version": null, "stance": "recommend", "quote": "it was resolved within a few days", "excerpt": "Assuming this is what you are referring to, it was resolved within a few days. The incident being resolved just didn't make headlines. https://sourceforge.net/p/veracrypt/discussion/general/thread/9620d7a4b3/?page=1#43c0", "context": "", "use_case": "", "switched_from": "", "story": "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory"}, {"id": 776636161, "item_id": 48539760, "url": "https://news.ycombinator.com/item?id=48539760", "by": "hakavlad", "date": "2026-06-15", "version": null, "stance": "compare", "quote": "Unlike VeraCrypt and Shufflecake, tirdFS containers do not contain headers", "excerpt": "I'm working on steganographic storage and file encryption tool. tird /t\u026ard/ (an acronym for \"this is random data\") is a steganographic storage and file encryption tool. With tird [0], you can: 1. Encrypt file contents and comments with keyfiles and passphrases. The encrypted data format (cryptoblob) is a padded uniform random blob (PURB): it looks like random data and has a randomized size. This reduces metadata leak", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What are you working on? (June 2026)"}, {"id": 770742976, "item_id": 48171436, "url": "https://news.ycombinator.com/item?id=48171436", "by": "Hypomixolydian", "date": "2026-05-17", "version": null, "stance": "recommend", "quote": "Veracrypt was independently audited, even by German BSA [1] and no serious problems were found.", "excerpt": "How so? Veracrypt was independently audited, even by German BSA [1] and no serious problems were found. [1] https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Veracrypt/Veracrypt.pdf", "context": "", "use_case": "Encrypting disks and volumes", "switched_from": "", "story": "Security researcher says Microsoft built a Bitlocker backdoor, releases exploit"}, {"id": 770715936, "item_id": 48169746, "url": "https://news.ycombinator.com/item?id=48169746", "by": "rpdillon", "date": "2026-05-17", "version": null, "stance": "warn", "quote": "too many weird flags around the whole project", "excerpt": "Curious to see this take from you! I followed TrueCrypt for years, but always thought it was very strange that they were anonymous, and then the mysterious shutdown happened, and I have no idea what to make of VeraCrypt. It's been in my \"possibly good, but too many weird flags around the whole project\" bucket. Anything in particular that makes you wary? I'm aware of the 2016 and 2020 audits (https://ostif.org/the-ver", "context": "", "use_case": "", "switched_from": "", "story": "Security researcher says Microsoft built a Bitlocker backdoor, releases exploit"}, {"id": 764842352, "item_id": 47802647, "url": "https://news.ycombinator.com/item?id=47802647", "by": "snailmailman", "date": "2026-04-16", "version": null, "stance": "neutral", "quote": "It has been resolved.", "excerpt": "It has been resolved. https://sourceforge.net/p/veracrypt/discussion/general/thread/9620d7a4b3/?page=1#43c0", "context": "", "use_case": "", "switched_from": "", "story": "WireGuard makes new Windows release following Microsoft signing resolution"}, {"id": 763382896, "item_id": 47711431, "url": "https://news.ycombinator.com/item?id=47711431", "by": "fuckinpuppers", "date": "2026-04-09", "version": null, "stance": "recommend", "quote": "But I still like it for containers", "excerpt": "Hopefully this is just boot issues, and not VC in general moving forward for now. I just centralized on leveraging VC for container encryption. I actually moved away from VC back to Bitlocker for FDE just a couple weeks ago (I forget the exact reasons why) But I still like it for containers, and I hope they can figure out a way to get it fixed for VC and WireGuard or they can figure out alternate signing options and ", "context": "", "use_case": "container encryption", "switched_from": "", "story": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates"}, {"id": 763147472, "item_id": 47696717, "url": "https://news.ycombinator.com/item?id=47696717", "by": "Jigsy", "date": "2026-04-08", "version": null, "stance": "neutral", "quote": "", "excerpt": "Windscribe is now the third one to be terminated by Microsoft as well... https://nitter.net/windscribecom/status/2041929519628443943", "context": "", "use_case": "", "switched_from": "", "story": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates"}, {"id": 753193313, "item_id": 47074582, "url": "https://news.ycombinator.com/item?id=47074582", "by": "andai", "date": "2026-02-19", "version": null, "stance": "neutral", "quote": "Later I did the same thing with a VeraCrypt volume.", "excerpt": "When I had a Mac I used an encrypted volume in Dropbox. (Not sure if that's a good idea, but I didn't have any issues.) I used Notational Velocity in those days :) A rare gem of ergonomics. Later I did the same thing with a VeraCrypt volume. Now I'm in Obsidian, which has its own encryption (if you trust 'em!), but never quite got the frictionless feeling of NV back.", "context": "", "use_case": "Encrypted volumes", "switched_from": "", "story": "Show HN: An encrypted, local, cross-platform journaling app"}, {"id": 748668496, "item_id": 46791781, "url": "https://news.ycombinator.com/item?id=46791781", "by": "a99p", "date": "2026-01-27", "version": null, "stance": "warn", "quote": "VeraCrypt has been tried and tested but it appears to perform poorly on modern NVME devices", "excerpt": "VeraCrypt has been tried and tested but it appears to perform poorly on modern NVME devices due to inherent limitations in its TrueCrypt based architecture. As a Windows FOSS alternative, you can consider DiskCryptor. However, unlike VeraCrypt, it has not been audited (to my knowledge) and lacks many QoL features. Use at your own discretion. It is being maintained here: https://github.com/DiskCryptor/DiskCryptor", "context": "", "use_case": "", "switched_from": "", "story": "Encrypt your PC's disk without giving the keys to Microsoft"}, {"id": 747915200, "item_id": 46744700, "url": "https://news.ycombinator.com/item?id=46744700", "by": "debazel", "date": "2026-01-24", "version": null, "stance": "warn", "quote": "it's not TRIM but how VeraCrypt handles I/O operations", "excerpt": "The performance loss can be substantial on modern NVMe drives, up to 20 times slower. But I was wrong about the reason for the performance loss, it's not TRIM but how VeraCrypt handles I/O operations. You can see some numbers real numbers in this Github issue: https://github.com/veracrypt/VeraCrypt/issues/136", "context": "", "use_case": "disk encryption", "switched_from": "", "story": "Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops"}, {"id": 747906128, "item_id": 46744133, "url": "https://news.ycombinator.com/item?id=46744133", "by": "sandworm101", "date": "2026-01-24", "version": null, "stance": "recommend", "quote": "", "excerpt": "https://linuxmint.com/ https://ubuntu.com/download/desktop Every bad day for microsoft is anothe glorious day for linux.", "context": "", "use_case": "", "switched_from": "", "story": "MS confirms it will give the FBI your Windows PC data encryption key if asked"}, {"id": 747901728, "item_id": 46743858, "url": "https://news.ycombinator.com/item?id=46743858", "by": "shoknawe", "date": "2026-01-24", "version": null, "stance": "recommend", "quote": "Veracrypt", "excerpt": "Veracrypt https://veracrypt.io/en/Home.html", "context": "", "use_case": "", "switched_from": "", "story": "MS confirms it will give the FBI your Windows PC data encryption key if asked"}, {"id": 747885265, "item_id": 46742829, "url": "https://news.ycombinator.com/item?id=46742829", "by": "pregnenolone", "date": "2026-01-24", "version": null, "stance": "neutral", "quote": "using Veracrypt shouldn't make much of a difference", "excerpt": "I\u2019m not trying to defend Microsoft, but so much of the stuff here is just painful to read. People shouting about backdoors, FBI, Linux, VeraCrypt \u2013 in completely bizarre combinations. It's astonishing what kind of garbage people come up with based on a superficial understanding of the topic. First of all, the fact that Windows uploads recovery keys to Microsoft accounts is nothing new and has been known for a long ti", "context": "", "use_case": "", "switched_from": "", "story": "Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops"}, {"id": 747856048, "item_id": 46741003, "url": "https://news.ycombinator.com/item?id=46741003", "by": "debazel", "date": "2026-01-23", "version": null, "stance": "warn", "quote": "the issue is actually related to how VeraCrypt handles IRPs", "excerpt": "Oh I did not know of this option, thanks! However, I was wrong about the reason for the performance loss on high speed SSDs and the issue is actually related to how VeraCrypt handles IRPs: https://github.com/veracrypt/VeraCrypt/issues/136#issuecomment-443522115", "context": "", "use_case": "", "switched_from": "", "story": "Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops"}]}