How to securely copy files directly from Vault to DispVM Veracrypt USB?

User Support
1

Just wondering if there is a way to securely copy files directly from Vault to a dispVM’s veracrypt mounted SSD?

I know how to copy files and folders using the Copy/move feature with Qubes however this copies into another folder first (known as Qubesincoming) which I would then need to copy again into the Veracrypt folder once it’s decrypted.

My point is I dont feel it’s secure having to copy from one VM to another VM (QubesIncoming) then to the veracrypt folder which might leave recoverable traces after you delete the contents in the QubesIncoming folder.

Is there a safe and secure way of copying direct to the veracrypt folder or is it best to install Veracrypt in Vault also to completely mitigate this situation?

Also on a side note if you delete a file on Qubes does it overwrite with 0’s or can it still be recoverable using forensic tools etc?

Thanks

2

It can leave traces.

3

Mount the decrypted veracrypt volume to QubesIncoming/Vault. The veracrypt GUI should have some sort of configuration setting that will cause it to do that when it decrypts the drive. Otherwise, with great care you can manually (command line) unmount the drive without locking it, then remount it where you want it to go.

Files will go directly to the USB without having to go through the intermediary directory.

4

Perfect thanks heaps SteveC

1 Like