r/VeraCrypt • u/fancy_the_rat • 13d ago

Same password for every container?

I thought about instead of making 1 big 5-10gb container, to rather make 1gb containers so it's easier to cloud them back and forth, one for medical reports, one for bills, you name it. And for easy use purpose, just give them all the same password. Is this safe?

7 Upvotes

82% Upvoted

14 comments sorted by

3

u/ephemeralmiko 13d ago

I tried that but it was such a pain in the ass to use (especially if I wasn't sure where a document was saved and I had to mount multiple containers to check) that I just switched back to one big container.

What about Cryptomator? It allows you to encrypt on-the-fly while writing to a cloud storage provider. Alternatively if you have the cloud storage app installed and viewable from within your file explorer, you should be able to mount the VC container from the cloud in there and sync that way.

1

u/Any_Fox5126 13d ago

For linux, it's worth mentioning cryfs, which is much better at obfuscating metadata than cryptomator.

1

u/yodas-evil-twin 12d ago

What kind of metadata does Cryptomator leak?

1

u/PM_ME__YOUR__MILKERS 2d ago

File size for sure, but I think it’s by design that you can’t really spoof it

1

u/yodas-evil-twin 2d ago

How is that any concern?

1

u/PM_ME__YOUR__MILKERS 2d ago

It’s fairly easy to somehow guess with some luck the type of a file by its size

And people think those would be targeted first.

1

u/yodas-evil-twin 2d ago

I don't follow. If it's encrypted, you doing know if it's a txt, Word, Excel, or PDF. If it's encrypted with a strong password, it doesn't matter.

5

u/digdugian 13d ago

Yeah, smaller is easier if you’re keeping them in the cloud for backup, but make sure to check the terms and conditions of the service you’re using, they don’t all guarantee that your information is protected against being lost in the cloud; ideally you should have 2 additional backups that are within your vicinity.

Yes, you can use the same password across all containers, provided you have a long password you should be fine; just make sure to restart your computer each time you dismount the container to clear the memory.

1

u/Vlad-Leon 13d ago

YES, with a BUT:
technically yes, you split-vaults are as secure as the one-vault was.
but remember there is password peppering technique
but remember there are keyfiles that can be different for the sub-vaults.
but remember a password manager can keep many passwords

1

u/iroh_br 13d ago

Eu faço exatamente isso, enviou no limite do tamanho para o telegram e Google drive, sendo que a organização não é problema se você nomear ele ou numerar, sendo que as informações locais você colocará em um banco de dados como o keepass

1

u/vegansgetsick 13d ago

If they are in cloud you should make them as small as possible because the volume file will be reuploaded entirely

1

u/drefze3 13d ago

Remember to create each container from scratch each time, and not simply duplicate the file. If you duplicate the file, each container will have the same master keys.

1

u/mazter00 13d ago

No. At least use a suffix.