@jrdepriest @quinn I'd just not risk it and #VeraCrypt like all file containers, doesn't change the mdate and thus bricks #OneDrive #sync.

@marczz

Why you should use full-disk encryption

If any of the arguments I make below apply to you, you should use full-disk encryption. I am pretty sure the first argument applies to everyone. The second argument applies at least to everyone in the EU and the US state of California. The third argument applies to everyone again.

You will fail to delete drives properly

Storage media get lost. Most people do not know how to properly delete hard disk content before selling them, or they forget it. In the case of flash drives, or SSDs, standard tools like shred don't work. hdparm may do the trick, but this is not well known. If you are lucky, the manufacturer of you SSH provides a Windows app that lets you delete it securely. Your server does not run on Windows of course.

The law demands it

#GDPR and similar data protection and privacy laws require you to store no #PII (personal data) permanently. You have to anonymize PII or delete it after a few weeks. IP addresses are PII. All servers store IP addresses by default. The GDPR also demands that you use state-of-the-art technology to protect sensitive data. Full disk encryption is the state of the art.

Law enforcement makes "mistakes"

I'm a board member of @Artikel5eV, an organisation that runs relays on the Tor network, including exit relays. Running Tor relays is perfectly legal in Germany. Nevertheless, law enforcement agencies have raided the homes of Artikel 5 e.V. board members twice. Illegally so, as a court confirmed recently. I won't run Tor relays in my home, but there is a good chance that my home will be raided one day unless all police officers and prosecutors decide to obey the law.

There is also a possibility that the rule of law might collapse in your country sooner or later. We are just witnessing it in the USA.

You already mentioned that ordinary thieves can also be a problem.

Encryption is available for free

So what is your case against disk encryption? It is obvious that it alone does not solve all IT security issues, but it is an important building block. #LUKS is reliable free and open-source software for HD encryption. If you are not using Linux, check out #VeraCrypt. The Raspberry Pi 5 comes with hardware acceleration for AES, so there no longer is a noticeable performance penalty for encryption.

@kuketzblog Hoffentlich hilft es den Menschen zu verstehen Datensicherheit und Verschlüsselung selbst in die Hand zu nehmen und Tools wie #VeraCrypt, PGP-Keys, #KeePass, @cryptomator , usw. zu nutzen.

@agu 1,2kg is a pretty steep target, but feasible unless you want a 15" 4k monster with dedicaded GPU.

• As with toolfree-swappable storage, that is easy to solve too.

I'd recommend to use either #LUKS-encrypted #btrfs or #VeraCrypt-encrypted #ext4 for portable storage...

@bipoTheClown

### Release #VeraCrypt version 1.26.20 · veracrypt/VeraCrypt (3 #February 2025):

> All OSes:
- Implement SHA-256 acceleration on #ARM64 platforms using CPU instructions.
- Update translations.
- Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards

https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.20