If I wipe a SSD twice with Killdisk, then do a clean install of Windows 11, then do full disk encryption with Veracrypt, then clone this disk to several wiped external SSDs, can I use the same password and recovery tools on all of these disks?
1 Answer
The VeraCrypt developers strongly advise against cloning volumes, because once changes happen, an attacker with access to both volumes can analyze the exact differences between the ciphertexts. This might be usable for cryptographic attacks or for revealing the existence of hidden volumes.
Always create a fresh volume and then copy the plaintext data. If you want to keep backups on external storage devices, follow the instructions in the manual.
- Thanks, everyone. I have chosen to go with the following path for non-system backup SSDs : erase disk twice with killdisk, use diskpart to clean, perform full disk encryption with Veracrypt, and create a Veracrypt partition almost the size of the entire SSD with a different password. I have done this and it seems to work very well.Mark Donnell– Mark Donnell2025-11-04 19:40:02 +00:00Commented Nov 4 at 19:40