You can encrypt a USB flash drive on Linux with VeraCrypt by creating a device-hosted VeraCrypt volume on the USB device or one of its partitions. The process is straightforward, but it is destructive: the selected device or partition is formatted and the files already stored there are lost.
Important: Back up anything you need before continuing. You do not have to manually delete every partition first, but you must be certain you select the correct USB device in VeraCrypt. This guide assumes you are creating a new encrypted volume rather than preserving data in place.
Install VeraCrypt from the official VeraCrypt Downloads page. The project currently lists VeraCrypt 1.26.29 as its stable release and provides Linux AppImages, generic installers, Debian/Ubuntu packages, RPM packages, and ARM64 builds. Using the official download page also helps you avoid old package links and lets you check the published signatures or checksums.
Before opening the wizard, connect the USB flash drive and identify it. On Linux, a command such as lsblk -o NAME,SIZE,FSTYPE,MODEL,MOUNTPOINTS can help you compare the device path, capacity, model, and mounted partitions. Do not rely on a device name such as /dev/sdb alone because those names can change between boots or when other drives are connected.
Launch VeraCrypt and click Create Volume. VeraCrypt supports both file-hosted containers and partition/device-hosted volumes; for an encrypted USB drive, you want the latter.
Select the option for creating a volume within a partition or drive. The wording can vary by platform or build; VeraCrypt documentation refers to this as a device-hosted volume. Continue with Next.
Select Standard VeraCrypt volume unless you specifically need a hidden volume and understand its additional requirements. For a normal encrypted flash drive, the standard option is the simpler choice.
Click Select Device, then choose the intended USB device or partition. Match its size and identity with what you saw in lsblk. Double-check this screen: formatting the wrong entry can destroy data on another disk.
For most users, leaving VeraCrypt's default encryption settings is reasonable. The program supports several encryption algorithms, and newer releases also offer additional key-derivation choices for non-system volumes. Change these settings only when you have a specific compatibility or policy requirement. The official volume-creation documentation explains the available options.
Enter a long, unique password and confirm it. Do not reuse a login password or something easy to guess. Store the password securely if you cannot reliably remember it; without the correct credentials, the encrypted data will not be practically recoverable.
Select a filesystem based on where you need to use the drive. exFAT is a practical choice when the USB drive must move between Linux, Windows, and macOS. For Linux-only use, Ext4 is a common choice. VeraCrypt's Linux build can create FAT, Ext2, Ext3, Ext4, NTFS, exFAT, and Btrfs volumes when the required system formatter is available. FAT is less suitable when you need individual files larger than 4 GiB.
If you are unsure about Quick Format, leave it unchecked; VeraCrypt's documentation recommends the non-quick format when in doubt. Move the pointer around the wizard when prompted to contribute randomness, then click Format. Creation time depends on the drive size and whether Quick Format is disabled.
After the volume is created, return to VeraCrypt. Use Select Device to choose the encrypted USB volume, select an available slot, and click Mount; you can also use Auto-Mount Devices. Enter the volume password when prompted. The official mounting guide documents the available mount options.
For command-line workflows on Linux, VeraCrypt also provides a text interface, including interactive volume creation with veracrypt -t -c. See the official Linux and macOS command-line documentation for supported options and security notes.
Capture Linux desktop audio in Audacity by routing its recording stream to your output device’s monitor source. Follow PulseAudio and PipeWire steps, export tips, and fixes for silent tracks.
Install Dropbox on Linux from the official package, sign in, sync a local folder, manage selective sync, and check status from the command line.
Install Inkscape from your Linux distribution’s repositories, the Ubuntu stable PPA, Snap, or Flathub, with current commands and notes for choosing a package source.
Use FSlint to scan selected Linux folders, review duplicate groups, and safely delete redundant files or learn when hard-link merging is appropriate.
Install SABnzbd on Ubuntu or Debian, or run it in Docker on another Linux host. Then open the web interface and configure your provider and download folders.
Install the Paper GTK theme from supported Linux repositories, enable it for GTK apps in GNOME Tweaks, and see what the legacy theme can and cannot change.
The old OpenMediaVault Plex plugin is archived. Set up Plex on OMV 8 with OMV-Extras, the Compose plugin, persistent storage, and Plex’s official container.
Clean and speed up Ubuntu with safe APT cleanup, storage checks, and startup controls that help free space and troubleshoot a sluggish desktop.
Install Hiri on Linux with its Snap package or official tarball, add a desktop launcher, and check supported accounts plus a warning about Hiri’s old Snap release.
Use Fastfetch and built-in Linux commands to check your distro, kernel, CPU, memory, graphics, storage, and connected devices, then save a clear report.
