VeraCrypt Volume
There are two types of VeraCrypt volumes:
File-hosted (container)
Partition/device-hosted (non-system)
Note: In addition to creating the above types of virtual volumes, VeraCrypt can encrypt a physical
partition/drive where Windows is installed (for more information, see the chapter System
Encryption).
A VeraCrypt file-hosted volume is a normal file, which can reside on any type of storage device. It
contains (hosts) a completely independent encrypted virtual disk device.
A VeraCrypt partition is a hard disk partition encrypted using VeraCrypt. You can also encrypt
entire hard disks, USB hard disks, USB memory sticks, and other types of storage devices.
Creating a New VeraCrypt Volume
To create a new VeraCrypt file-hosted volume or to encrypt a partition/device (requires
administrator privileges), click on ‘Create Volume’ in the main program window. VeraCrypt Volume
Creation Wizard should appear. As soon as the Wizard appears, it starts collecting data that will be
used in generating the master key, secondary key (XTS mode), and salt, for the new volume. The
collected data, which should be as random as possible, include your mouse movements, key
presses, and other values obtained from the system (for more information, please see the section
Random Number Generator). The Wizard provides help and information necessary to successfully
create a new VeraCrypt volume. However, several items deserve further explanation:
Hash Algorithm
Allows you to select which hash algorithm VeraCrypt will use. The selected hash algorithm is used
by the random number generator (as a pseudorandom mixing function), which generates the
master key, secondary key (XTS mode), and salt (for more information, please see the section
Random Number Generator). It is also used in deriving the new volume header key and secondary
header key (see the section Header Key Derivation, Salt, and Iteration Count).
For information about the implemented hash algorithms, see the chapter Hash Algorithms.
Note that the output of a hash function is never used directly as an encryption key. For more
information, please refer to the chapter Technical Details.
Encryption Algorithm
This allows you to select the encryption algorithm with which your new volume will be encrypted.
Note that the encryption algorithm cannot be changed after the volume is created. For more
information, please see the chapter Encryption Algorithms.
