My laptop's 500 GB system SSD is fully encrypted with VeraCrypt using AES-256, but I recently added a 2 TB SSD for programs, games, school files, and virtual machines. I'd like both drives to be protected if the laptop is stolen and, ideally, unlocked with one password when the computer starts. Can VeraCrypt encrypt both physical drives as a single bootable volume, or can I customize the password prompt so the second drive unlocks automatically after the system drive?
3 Answers
VeraCrypt generally cannot combine two separate physical drives into one system-encrypted boot volume. You can encrypt the second SSD separately, then mount it after Windows starts using its own password, a stored keyfile, or VeraCrypt’s favorite-volume and auto-mount options. That protects the data, but it won’t be exactly the same as one single disk unlocked by the pre-boot password.
Windows editions differ in their built-in encryption options, so VeraCrypt can be useful when the built-in tools aren’t available. Just be careful with system encryption: major operating-system updates, bootloader changes, or hardware problems can prevent startup. Make sure you have the VeraCrypt rescue disk and current backups before encrypting the second drive.
Encrypt the 2 TB SSD as a separate VeraCrypt data volume. Once you log in, VeraCrypt can mount it automatically if you configure the volume as a favorite and enable auto-mounting, though you should understand that storing credentials or a keyfile on the system can reduce the security benefit. Keep a backup of the important files and the volume header before relying on the setup.
So the drives can be unlocked automatically one after the other, but they cannot appear as one VeraCrypt-encrypted boot volume?