Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: TrueCrypt - Recover Corrupt Container

TrueCrypt - Recover Corrupt Container

How to Recover a TrueCrypt Container with Corrupt Header Information
Published by Golden
03 Oct 2012
Published by

How to Recover a TrueCrypt Container with Corrupt Header Information

information   Information
TRUECRYPT is a free open source application that allows you to encrypt files, folders, partitions or even entire physical drives. It is a very useful alternative to Windows Bitlocker Drive Encryption, which is only available in Windows 7 Ultimate.

In some cases, the header information of an encrypted container/volume can become corrupted resulting in the inability to mount the container/volume and retrieve the encrypted data.

TrueCrypt allows you to attempt to recover the corrupted volume header information, thereby allowing you to access the encrypted data by mounting the container/volume as you normally would.

warning   Warning
Encrypted containers/volumes can only be recovered using this method if the volume header information is corrupted. It will NOT recover the information within the container/volume if the actual data within the container has also been corrupted, or if the encryption password has been forgotten

In order to completely protect your encrypted data, you must ensure that you have also used the other disaster recovery options mentioned in Step 3 - Disaster Recovery described here. Recovery using volume header backups should always be considered a last resort.

Symptoms of a Corrupt Volume Header
If you attempt to mount an encrypted container in which the volume header information has been corrupted, you will see this panel:
TrueCrypt - Recover Corrupt Container-y1.png
If you are sure that you have entered the password correctly, then the only reason this panel is displayed is because the header information contained in the encrypted volume has become corrupted to the degree that Truecrypt no longer recognises the container/volume.

You can attempt to 'fix' the corrupted header by mounting the encrypted volume using the backup header information.

Recovering the Volume Header
TRUECRYPT allows you to attempt to recover corrupted volume header information using two techniques:

  1. Using an internal or embedded backup of the volume header
  2. Using an external backup of the volume header
warning   Warning
If you have changed your original encryption container/volume password, and then recovered a corrupted volume using the internal/embedded backup technique, then you can only mount the encrypted volume using this original password. This is because the internal/embedded header backup is only created once, storing the original password within the backup - subsequent changes in password are never written to the internal/embedded header backup.

If you cannot remember the original password, then you must use the external backup technique as outlined in Method 2 below. This technique assumes that you created the external backup prior to the container header becoming corrupted - refer to Step 3 - Disaster Recovery described here.

Method 1: Recovery using the Internal (Embedded) Backup
When you create an encrypted container/volume, Truecrypt automatically creates an internal backup of the volume header that is embedded within the encrypted container.

From the main Truecrypt panel, use the Select File option to select the encrypted container, and then select the Volume Tools option, as shown below.
TrueCrypt - Recover Corrupt Container-y2.png
From the pull-down list that appears, choose the Restore Volume Header option.
TrueCrypt - Recover Corrupt Container-y3.png
From the pop-up panel, select the first option (the internal backup of the volume header)
TrueCrypt - Recover Corrupt Container-y4.png
Now enter the password that you used when you first created the encrypted container/volume.
TrueCrypt - Recover Corrupt Container-y5.png
In the Random Pool Mixing panel, move your mouse over the hexdecimal characters in a random fashion to create the HASH, and then click Continue.
TrueCrypt - Recover Corrupt Container-y6.png
After a short period, the corrupted header information of the encrypted container is replaced with the internal backup of the header. A confirmation message will be displayed. Click OK to close the message, and then proceed to mount and use the volume as normal.
TrueCrypt - Recover Corrupt Container-y7.png

Method 2: Recovery using the External Backup
If you created an external backup of the volume header as described in Step 3 - Disaster Recovery described here, you can attempt to recover the corrupt volume header from that backup.

The steps required are exactly the same as described earlier, with the exception that you choose the Restore the volume from an external backup file option as shown below.
TrueCrypt - Recover Corrupt Container-zz11.png
Once you have selected that option, you will be prompted to browse to the location of the header backup you created. You will then be prompted to input your volume password, and after a few seconds you will receive a confirmation message that the header was successfully recovered, as shown below.
TrueCrypt - Recover Corrupt Container-zz22.png
You can now mount and work with the encrypted volume as normal.

warning   Warning
A final word of caution : its extremely difficult to test this recovery functionality since the volume is encrypted. As such, I only recommend this method as a very last resort when you have exhausted all other means of recovery.


28 Nov 2012   #1

Windows 7 Home Premium 64bit SP 1

Nice job Golden. I stumbled across this tutorial and decided that it might not be a bad idea to backup the header for my TrueCrypt volume. I do have it saved on other HDDs as well, but a little extra precaution never hurt anybody.

My System SpecsSystem Spec
28 Nov 2012   #2
Microsoft MVP

Windows 7 Ult. x64

Thanks. Glad you found it useful :)
My System SpecsSystem Spec
27 Dec 2012   #3

Windows 8

Nice job Golden.
My System SpecsSystem Spec


 TrueCrypt - Recover Corrupt Container

Thread Tools

Similar help and support threads
Thread Forum
All memory used when copying files from Truecrypt container
I'm in the process of moving data from a WD 3TB USB drive to a larger WD 5TB USB drive, so there is a LOT of data to move around. While this is in all probability a Truecrypt (TC) issue, it doesn't hurt to ask anyway! I have a quad core i7 pc with Win 7 Home and 16GB RAM, which is the limit for...
Performance & Maintenance
How to recover data from Corrupt Flash Drive
So i have a USB drive that has a Red Bar when im viewing it from computer, it says 17.7 MB free of 3.73 but when i open it theres no files on it, ive tried Softorbits and Wondershare file recovery but it cannot find any of the files on the Drive, is there any way i can retrieve the files off of the...
General Discussion
Corrupt system files can't recover
I have a win 7 home 64 install. It seems some system files are corrupt.. I ran sfc /scannow and looked at the results and there is a system,web.tlb that it cannot repair. This seems to be part of .net 2.x I have tried to remove the patches that it was referencing, I still have issues. If...
Performance & Maintenance
Truecrypt incorrect password or not a truecrypt volume
I have a problem with two external-hardrives that I cant access. I keep getting incorrect password or not a truecrypt volume I have one drive that is a 2 terabyte drive and another one that's 1 terabyte. They both where working fine when I tested them about a week ago. Since Saturday I have been...
Cannot recover damaged MFT on a TrueCrypt partition
I've been using TrueCrypt 7.0a to encrypt the partitions on my external and internal hard drives for quite some time now. In fact, because I had no other available space, I copied a disc iso to one such partition just last night. This morning, however, when I try to mount and access that...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:25.
Twitter Facebook