Editing Linux graphical encryption program (section)

=== Choose a security level (password, PIM, keyfile)===

Now, it is time to define your password. It will be used to decrypt the volume. You have to define a very strong one.

![Set a Veracrypt volume password and the keyfile to decrypt  the volume](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/15-min-800x495.jpeg)

Set a volume password and the keyfile to decrypt the volume

Usually, setting a password is secure enough. However, if you want to be your encryption as secure as possible, you can also enable the PIM option, this means you just need to specify a specific number during the mounting process. I never use it. If you want more security I recommend you to use a key file. This is a very useful option. So, I will create a KeyFile to show you the process.

==== Create a KeyFile====

To create a key file, just click on the _Generate random key file_ button.

![Generate a random keyfile for Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/16-min.jpeg)

Generate a random keyfile

You need to move your mouse randomly as much as possible to create some random numbers which will be stored in this key file. You can move it until the Randomness bar is completely full. After that, you give it a name, click on the _Generate and Save Keyfile_ option and choose a place to save it.

![Now, you can generate and save the keyfile in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/18-min.jpeg)

Now, you can generate and save the keyfile

Once the keyfile is created, it is necessary to add it to the volume so that they are connected. Normally, the keyfile is generated in the same directory where VeraCrypt is located. In this case, `/home/alu/Download/`. So, Click on the _add_ button and select the keyfile.

![Add the keyfile to the volume in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/19-min.jpeg)

Add the keyfile to the volume

Next, press the OK button.

![Add the keyfile in Veracrypt](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/21-min.jpeg)

Press the ok button to add the keyfile

Now, to unencrypt this volume you have to use the password and in addition to this, you also need to use a key file. I recommend storing the keyfile on your USB drive, for greater security.

_NOTE that If you lose your key file you will not be able to unencrypt this volume. So, make sure you have a backup of this key file._

Next, click on the _Next_ button.

![You can continue the volume creation](https://averagelinuxuser.com/assets/images/posts/2019-02-26-linux-gui-encryption/22-min-800x492.jpeg)

You can continue the volume creation