VeraCrypt is a free, open-source, local disk-encryption tool that creates encrypted virtual disks, encrypts entire partitions or storage devices, and supports pre-boot authentication for full-system encryption, based on TrueCrypt 7.1a. Its own documentation states the entire file system, including filenames and metadata, is encrypted, and that decrypted data is never written back to disk, only held temporarily in RAM. The project was created and led by Mounir Idrassi, originally under the France-based company IDRIX (copyright 2013-2025); at draft time the project's copyright notices and homepage attribute current stewardship to "AM Crypto," the same individual's newly rebranded operation, now based in Kobe, Japan. The project's source is fully published across GitHub, SourceForge and Bitbucket mirrors. A named-firm security audit by Quarkslab, funded by the Open Source Technology Improvement Fund (OSTIF), fed fixes into the 1.19 release, and the project continues to disclose and fix externally reported vulnerabilities (including two GitHub Security Advisories fixed in the 2026 release cycle, credited to an outside reporter) under its own published security-research policy.
TIMELINE
1 ENTRY
[2026-08-30] · NEW RECEIPTS
8 new sources on file for VeraCrypt.
VeraCrypt's file gained 8 new sourced claims since its last review.
VeraCrypt's Introduction documentation states the entire file system within an encrypted volume is encrypted, including file names, folder names, file contents, free space, and metadata, and that files can be copied to and from the mounted volume like any normal disk with encryption/decryption happening automatically in RAM.
VeraCrypt's Source Code page states the complete source code, written in C, C++, and assembly, is freely available for peer review across independent GitHub, SourceForge, and Bitbucket repositories.
VeraCrypt's Legal Information page's copyright notices attribute current stewardship of the software to "AM Crypto" as of 2026, immediately followed by the prior operator, "IDRIX," credited for 2013-2025 — documenting a recent change of the project's operating entity.
The AM Crypto website, linked from VeraCrypt's own legal notices, identifies its operator as Mounir Idrassi, the same individual who created VeraCrypt in 2013, now based in Kobe, Japan.
VeraCrypt's own Home page describes its complete feature set as entirely local: creating a virtual encrypted disk within a file, encrypting an entire partition or storage device such as a USB flash drive or hard drive, and encrypting the partition or drive on which the operating system is installed for pre-boot authentication — with no cloud, account, or server-side component described anywhere.
VeraCrypt's own Release Notes disclose a 2026 GitHub Security Advisory fix for a hidden-volume quick-format regression that had written plaintext zero sectors at 128 MiB intervals, undermining plausible deniability, and credit the outside researcher who reported it.
VeraCrypt's Home page discloses that its 1.19 release included fixes for issues reported by a Quarkslab security audit, which was funded by the Open Source Technology Improvement Fund (OSTIF) — a named third-party firm's audit with independent public-interest funding, published as the reason for that release's security fixes.
VeraCrypt's Introduction documentation states the software never writes decrypted data back to disk, holding it only temporarily in RAM while it is being used, so no persistent unencrypted artifact is left behind after the volume is unmounted or the computer is shut down.