How To Install Truecrypt On Ubuntu


Mounting a volume

$ truecrypt --mount /path/to/device /path/to/mountpoint


$ truecrypt --mount /dev/sdc1 /media/thefolder

then enter the password and other info if necessary.


I was able to mount the drive and access it via WinSCP but not anything else. To mount the drive so that you have read and write permissions, mount the drive with the code below:
the path to the solution is the bottom answer (with 0 votes):
and here:

$ truecrypt --fs-options=users,uid=$(id -u),gid=$(id -g),umask=002 --mount /dev/sdc1 /media/thefolder

The code above sets permissions to 0775 (777 – 002 = 775). More examples of umask:

umask=000 [sets permissions to 777]
umask=007 [sets permissions to 770]

take 777 and subtract the umask number to get the permissions


You can unmount a specific device by

$ truecrypt -d /path/to/mountpoint

or to unmount all truecrypt volumes:

$ truecrypt -d



If you get the error:

Error: umount: /media/truecrypt1: device is busy.

(In some cases useful info about processes that use the device is found by lsof(8) or fuser(1))

Then it is very likely that it is simply your terminal that is keeping the device busy. If you have your terminal open in the location of your volume, change out with

$ cd ..

And run truecrypt -d again.

If that doesn’t work, see ERRORS & SOLUTIONS at the link below:
How To Open A TrueCrypt Container Using cryptsetup

Do this to kill the busy processes and unmount the drive (substitute sdXN with the correct drive info:

$  sudo fuser -kim /dev/sdXN

The output will show runing processes, example:

/dev/sdXN:            8933  9628c
Kill process 8933 ? (y/N) y

Press ‘y’ to kill the process and do the same for the next prompt, then:

$ truecrypt -d


When trying to (re-)mount a truecrypt drive due to the error:

device-mapper: remove ioctl on truecrypt1 failed: Device or resource busy
Device /dev/mapper/truecrypt1 is still in use.

do this (where ‘drive’ is the mount folder and ‘truecrypt1’ is the truecrypt link in the ‘/dev/mapper’ directory):

$ sudo umount /media/drive
$ truecrypt -t -d
$ sudo cryptsetup remove /dev/mapper/truecrypt1

Then mount the drive again using the steps above.

Uninstalling TrueCrypt:

To uninstall TrueCrypt, please run ‘’.


Truecrypt HELP

$ truecrypt --help
Usage: truecrypt [--auto-mount <str>] [--backup-headers] [--background-task] [-C] [-c] [--create-keyfile] [--delete-token-keyfiles] [-d] [--display-password] [--encryption <str>] [--explore] [--export-token-keyfile] [--filesystem <str>] [-f] [--fs-options <str>] [--hash <str>] [-h] [--import-token-keyfiles] [-k <str>] [-l] [--list-token-keyfiles] [--load-preferences] [--mount] [-m <str>] [--new-keyfiles <str>] [--new-password <str>] [--non-interactive] [-p <str>] [--protect-hidden <str>] [--protection-keyfiles <str>] [--protection-password <str>] [--random-source <str>] [--restore-headers] [--save-preferences] [--quick] [--size <str>] [--slot <str>] [--test] [-t] [--token-lib <str>] [-v] [--version] [--volume-properties] [--volume-type <str>] [Volume path] [Mount point]
  --auto-mount=<str>            Auto mount device-hosted/favorite volumes
  --backup-headers              Backup volume headers
  --background-task             Start Background Task
  -C, --change                  Change password or keyfiles
  -c, --create                  Create new volume
  --create-keyfile              Create new keyfile
  --delete-token-keyfiles       Delete security token keyfiles
  -d, --dismount                Dismount volume
  --display-password            Display password while typing
  --encryption=<str>            Encryption algorithm
  --explore                     Open explorer window for mounted volume
  --export-token-keyfile        Export keyfile from security token
  --filesystem=<str>            Filesystem type
  -f, --force                   Force mount/dismount/overwrite
  --fs-options=<str>            Filesystem mount options
  --hash=<str>                  Hash algorithm
  -h, --help                    Display detailed command line help
  --import-token-keyfiles       Import keyfiles to security token
  -k, --keyfiles=<str>          Keyfiles
  -l, --list                    List mounted volumes
  --list-token-keyfiles         List security token keyfiles
  --load-preferences            Load user preferences
  --mount                       Mount volume interactively
  -m, --mount-options=<str>     TrueCrypt volume mount options
  --new-keyfiles=<str>          New keyfiles
  --new-password=<str>          New password
  --non-interactive             Do not interact with user
  -p, --password=<str>          Password
  --protect-hidden=<str>        Protect hidden volume
  --protection-keyfiles=<str>   Keyfiles for protected hidden volume
  --protection-password=<str>   Password for protected hidden volume
  --random-source=<str>         Use file as source of random data
  --restore-headers             Restore volume headers
  --save-preferences            Save user preferences
  --quick                       Enable quick format
  --size=<str>                  Size in bytes
  --slot=<str>                  Volume slot number
  --test                        Test internal algorithms
  -t, --text                    Use text user interface
  --token-lib=<str>             Security token library
  -v, --verbose                 Enable verbose output
  --version                     Display version information
  --volume-properties           Display volume properties
  --volume-type=<str>           Volume type




 Auto mount device-hosted or favorite volumes.

 Backup volume headers to a file. All required options are requested from the

-c, --create[=VOLUME_PATH]
 Create a new volume. Most options are requested from the user if not specified
 on command line. See also options --encryption, -k, --filesystem, --hash, -p,
 --random-source, --quick, --size, --volume-type. Note that passing some of the
 options may affect security of the volume (see option -p for more information).

 Inexperienced users should use the graphical user interface to create a hidden
 volume. When using the text user interface, the following procedure must be
 followed to create a hidden volume:
  1) Create an outer volume with no filesystem.
  2) Create a hidden volume within the outer volume.
  3) Mount the outer volume using hidden volume protection.
  4) Create a filesystem on the virtual device of the outer volume.
  5) Mount the new filesystem and fill it with data.
  6) Dismount the outer volume.
  If at any step the hidden volume protection is triggered, start again from 1).

 Create a new keyfile containing pseudo-random data.

-C, --change[=VOLUME_PATH]
 Change a password and/or keyfile(s) of a volume. Most options are requested
 from the user if not specified on command line. PKCS-5 PRF HMAC hash
 algorithm can be changed with option --hash. See also options -k,
 --new-keyfiles, --new-password, -p, --random-source.

-d, --dismount[=MOUNTED_VOLUME]
 Dismount a mounted volume. If MOUNTED_VOLUME is not specified, all
 volumes are dismounted. See below for description of MOUNTED_VOLUME.

 Delete keyfiles from security tokens. See also command --list-token-keyfiles.

 Export a keyfile from a security token. See also command --list-token-keyfiles.

 Import keyfiles to a security token. See also option --token-lib.

-l, --list[=MOUNTED_VOLUME]
 Display a list of mounted volumes. If MOUNTED_VOLUME is not specified, all
 volumes are listed. By default, the list contains only volume path, virtual
 device, and mount point. A more detailed list can be enabled by verbose
 output option (-v). See below for description of MOUNTED_VOLUME.

 Display a list of all available security token keyfiles. See also command

 Mount a volume. Volume path and other options are requested from the user
 if not specified on command line.

 Restore volume headers from the embedded or an external backup. All required
 options are requested from the user.

 Save user preferences.

 Test internal algorithms used in the process of encryption and decryption.

 Display program version.

 Display properties of a mounted volume. See below for description of

 Specifies a mounted volume. One of the following forms can be used:
 1) Path to the encrypted TrueCrypt volume.
 2) Mount directory of the volume's filesystem (if mounted).
 3) Slot number of the mounted volume (requires --slot).


 Display password characters while typing.

 Use specified encryption algorithm when creating a new volume.

 Filesystem type to mount. The TYPE argument is passed to mount(8) command
 with option -t. Default type is 'auto'. When creating a new volume, this
 option specifies the filesystem to be created on the new volume (only 'FAT'
 and 'none' TYPE is allowed). Filesystem type 'none' disables mounting or
 creating a filesystem.

 Force mounting of a volume in use, dismounting of a volume in use, or
 overwriting a file. Note that this option has no effect on some platforms.

 Filesystem mount options. The OPTIONS argument is passed to mount(8)
 command with option -o when a filesystem on a TrueCrypt volume is mounted.
 This option is not available on some platforms.

 Use specified hash algorithm when creating a new volume or changing password
 and/or keyfiles. This option also specifies the mixing PRF of the random
 number generator.

-k, --keyfiles=KEYFILE1[,KEYFILE2,KEYFILE3,...]
 Use specified keyfiles when mounting a volume or when changing password
 and/or keyfiles. When a directory is specified, all files inside it will be
 used (non-recursively). Multiple keyfiles must be separated by comma.
 Use double comma (,,) to specify a comma contained in keyfile's name.
 Keyfile stored on a security token must be specified as
 token://slot/SLOT_NUMBER/file/FILENAME. An empty keyfile (-k "") disables
 interactive requests for keyfiles. See also options --import-token-keyfiles,
 --list-token-keyfiles, --new-keyfiles, --protection-keyfiles.

 Load user preferences.

-m, --mount-options=OPTION1[,OPTION2,OPTION3,...]
 Specifies comma-separated mount options for a TrueCrypt volume:
  headerbak: Use backup headers when mounting a volume.
  nokernelcrypto: Do not use kernel cryptographic services.
  readonly|ro: Mount volume as read-only.
  system: Mount partition using system encryption.
  timestamp|ts: Do not restore host-file modification timestamp when a volume
   is dismounted (note that the operating system under certain circumstances
   does not alter host-file timestamps, which may be mistakenly interpreted
   to mean that this option does not work).
 See also option --fs-options.

 Add specified keyfiles to a volume. This option can only be used with command

 Specifies a new password. This option can only be used with command -C.

-p, --password=PASSWORD
 Use specified password to mount/open a volume. An empty password can also be
 specified (-p ""). Note that passing a password on the command line is
 potentially insecure as the password may be visible in the process list
 (see ps(1)) and/or stored in a command history file or system logs.

 Write-protect a hidden volume when mounting an outer volume. Before mounting
 the outer volume, the user will be prompted for a password to open the hidden
 volume. The size and position of the hidden volume is then determined and the
 outer volume is mounted with all sectors belonging to the hidden volume
 protected against write operations. When a write to the protected area is
 prevented, the whole volume is switched to read-only mode. Verbose list
 (-v -l) can be used to query the state of the hidden volume protection.
 Warning message is displayed when a volume switched to read-only is being

 Use specified keyfiles to open a hidden volume to be protected. This option
 may be used only when mounting an outer volume with hidden volume protected.
 See also options -k and --protect-hidden.

 Use specified password to open a hidden volume to be protected. This option
 may be used only when mounting an outer volume with hidden volume protected.
 See also options -p and --protect-hidden.

 Do not encrypt free space when creating a device-hosted volume. This option
 must not be used when creating an outer volume.

 Use FILE as a source of random data (e.g., when creating a volume) instead
 of requiring the user to type random characters.

 Use specified slot number when mounting, dismounting, or listing a volume.

 Use specified size in bytes when creating a new volume.

-t, --text
 Use text user interface. Graphical user interface is used by default if
 available. This option must be specified as the first argument.

 Use specified PKCS #11 security token library.

 Use specified volume type when creating a new volume. TYPE can be 'normal'
 or 'hidden'. See option -c for more information on creating hidden volumes.

-v, --verbose
 Enable verbose output.


If you want to use TrueCrypt, you must follow the security requirements and
security precautions listed in chapter 'Security Requirements and Precautions'
in the TrueCrypt documentation (file 'TrueCrypt User Guide.pdf').


Create a new volume:
truecrypt -t -c

Mount a volume:
truecrypt /media/truecrypt1

Mount a volume as read-only, using keyfiles:
truecrypt -m ro -k keyfile1,keyfile2

Mount a volume without mounting its filesystem:
truecrypt --filesystem=none

Mount a volume prompting only for its password:
truecrypt -t -k "" --protect-hidden=no /media/truecrypt1

Dismount a volume:
truecrypt -d

Dismount all mounted volumes:
truecrypt -d

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.