Editing Linux graphical encryption program (section)

== Create an encrypted VeraCrypt volume==

Now it is time to create a _VeraCrypt_ volume. Click on the _Create Volume_ button.

You can just create an encrypted file container. In short, it is a virtual folder which is encrypted. Or you can also encrypt the whole partition or the whole drive. Choose whatever you want the principle is basically similar for the two options. In this example, I will just create an encrypted container.

===Create an encrypted container===

![Veracrypt options: an encrypted file container or an encrypted partition/drive ](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/10-min-800x499.jpeg)

Veracrypt options: an encrypted file container or an encrypted partition/drive

In the next screen, I suggest you use a standard _VeraCrypt_ volume but if you want more security, you can use the hidden volume option. I will choose to create a Standard VeraCrypt volume.

![Choose the Veracrypt volume type](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/11-min-800x494.jpeg)

Choose the Veracrypt volume type

In this section, you have to select where you want this encrypted volume to be located. Click on the _Select File_ button and set the place and name. After that, click on the _Next_ button.

![Set the Veracrypt Volume Location](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/12-min-800x501.jpeg)

Set the Veracrypt Volume Location

VeraCrypt provides several encryption algorithms like AES, Twofish or Camellia. I usually choose AES. This should be secure enough. Click on the _Next_ button.

![Select the algorithm encryption for the Veracrypt volume](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/13-min-800x497.jpeg)

Select the algorithm encryption for the volume

Now, you have to define the space of the container. Veracrypt shows you how much disk space is available and you can create a volume of this size or smaller. In my case, I will create a 1Gb volume.

![Define the Veracrypt volume size](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/14-min-800x495.jpeg)

Define the volume size

=== Choose a security level (password, PIM, keyfile)===

Now, it is time to define your password. It will be used to decrypt the volume. You have to define a very strong one.

![Set a Veracrypt volume password and the keyfile to decrypt  the volume](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/15-min-800x495.jpeg)

Set a volume password and the keyfile to decrypt the volume

Usually, setting a password is secure enough. However, if you want to be your encryption as secure as possible, you can also enable the PIM option, this means you just need to specify a specific number during the mounting process. I never use it. If you want more security I recommend you to use a key file. This is a very useful option. So, I will create a KeyFile to show you the process.

==== Create a KeyFile====

To create a key file, just click on the _Generate random key file_ button.

![Generate a random keyfile for Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/16-min.jpeg)

Generate a random keyfile

You need to move your mouse randomly as much as possible to create some random numbers which will be stored in this key file. You can move it until the Randomness bar is completely full. After that, you give it a name, click on the _Generate and Save Keyfile_ option and choose a place to save it.

![Now, you can generate and save the keyfile in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/18-min.jpeg)

Now, you can generate and save the keyfile

Once the keyfile is created, it is necessary to add it to the volume so that they are connected. Normally, the keyfile is generated in the same directory where VeraCrypt is located. In this case, `/home/alu/Download/`. So, Click on the _add_ button and select the keyfile.

![Add the keyfile to the volume in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/19-min.jpeg)

Add the keyfile to the volume

Next, press the OK button.

![Add the keyfile in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/21-min.jpeg)

Press the ok button to add the keyfile

Now, to unencrypt this volume you have to use the password and in addition to this, you also need to use a key file. I recommend storing the keyfile on your USB drive, for greater security.

_NOTE that If you lose your key file you will not be able to unencrypt this volume. So, make sure you have a backup of this key file._

Next, click on the _Next_ button.

![You can continue the volume creation](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/22-min-800x492.jpeg)

You can continue the volume creation

=== Choosing a new filesystem for the volume===

Using a Linux graphical encryption program, you can set the file system for the new volume system. So, If you are going to mount the volume in Windows and Linux, you should choose FAT, but if you will only use it for Linux you can choose EXT4.

![Choose the filesystem type for the volume in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/23-min-800x494.jpeg)

Choose the filesystem type for the volume

In the next screen, you can choose if you want to mount this encrypted volume on different systems or only on Linux. The former option enables cross-platform compatibility of the encrypted volume.

![Veracrypt can enable the Cross-platform support](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/24-min-800x489.jpeg)

Veracrypt encryption can have the Cross-platform support

=== Encrypting the volume===

To encrypt the volume, you need to generate some randomness by moving your mouse as random as possible in the next screen. So, wait until the bar is completely filled. Next, click on the _Format_ button.

![Encrypting the volume in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/25-min-800x492.jpeg)

Encrypting the volume

You may also need to type your root password during this process.

![The administrator password may be required in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/26-min-800x496.jpeg)

The administrator password is required

In the end, you should see the screen saying that the volume has been successfully created. So, you can start using this Linux graphical encryption program.

![Volume created successfully](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/27-min-800x494.jpeg)

Volume created successfully