Backing Up True Crypt Headers

JohnnyScience · 17 Feb 2013

Is anyone familiar with doing this?

From my understanding it allows you to safeguard your data incase it (or the Headers? I'm not sure which) ever get corrupted.

Where do you store this particular file then?

I have a separate HDD just for media & that is the one that I backed up onto my Passport HDD for safe keeping.

Would I want to put this file on my main media HDD & then also copy it to the backup Passport HDD? (although I don't know how it would get accessed on the backup Passport if & when there is an issue with it's data becoming corrupted.)

Thanks.

MSchild · 19 Feb 2013

I suppose it wouldn't be a bad idea to back up the headers, especially if you use full disk encryption. In terms of security, the headers will be just as easy/difficult to crack as the TrueCrypt volume itself, so you could put backup copies in a few places without much worry.

In terms of fault tolerance, I would probably just put it on an external or flash drive if you're using full disk encryption, or on another partition if you're using partition encryption or container files.

But I don't think backing up the headers would help you in the case of random data corruption of the contents. I think it will only help you if your headers get corrupted, rendering your entire disk/partition/container useless, until the backup saves the day.

JohnnyScience · 03 Mar 2013

Thanks for the info. I think you are correct, backing up the headers is only useful incase the headers themselves get corrupted.

I read this article:

How To Backup True Crypt Data To Be Prepared For Emergencies -

I think from my understanding of this warning message that backing up the main header also backs up the hidden volume as well. Is that correct?

This is also a great walk-thru for anyone looking to backup their data using Truecrypt:

TRUECRYPT - Encrypt Data Folders

I assume backing up the headers is something you only need to do once? Not a regular thing correct? I know if you change passwords you would need to re-backup the headers, but that particular issue isn't a concern.

MSchild · 04 Mar 2013

Yes, you will only need to do it once.

It's been a while since I've read through the TrueCrypt docs, but the way I remember it is that the hidden header is attached to the end of the normal header. I think it operates the same way as the free space plausible deniability with the hidden volume inside of the outer volume, in such a way that there is no way to tell if the hidden volume header is bogus data or not (unless you have the password of course).