1

If one had an encrypted drive using Bitlocker, is it worth it to encrypt that drive again using another tool like VeraCrypt? Does this provide an extra layer of protection?

Not a duplicate of a question which deals with a more generalised point of view.

2 Answers2

2

Not really unless you are attempting to prevent people that have the bitlocker decryption key from accessing the drive, presuming you can make that work at all.

Jim B
  • 189
  • 1
  • 10
1

You are not adding any security. The difficulty on obtaining two passwords is not double of the work of getting one password. If someone manages to compromise one password, you can assume they can compromise two or three.

If you have a keylogger installed, it will get whatever decryption passwords you have, no matter how many. In this case, encrypting it two or ten times adds nothing.

If you are targeted by a government agency, you may have to hand off the keys, so having an extra layer does not improve anything.

And if you somehow loses one password, you lose the entire drive. By considering security as the called CIA principles (Confidentiality, Integrity, Availability), the more layers you add, the less security you have - because of the decreased availability potential.

ThoriumBR
  • 50,648
  • 13
  • 127
  • 142
  • Actually it doesn't decrease availability necessarily. Use of the TPM chip in the machine means that the password is for recovery purposes. So you'd only need the veracrypt password. – Jim B Apr 02 '18 at 22:13