TrueCrypt shuttered in 2014, though an independent audit didn't find any significant issues in 2015. [0] VeraCrypt is one of the main forks that has picked up

TrueCrypt shuttered in 2014, though an independent audit didn't find any significant issues in 2015. [0] VeraCrypt is one of the main forks that has picked up popularity, and has addressed some of the minor concerns of the audit. The hidden volume hasn't had a high degree of success when it comes to deniability [1]. Some leaks closed, probably not all. With the design, it may not actually be possible to close all the leaks. (Especially as "Stoned" can break the full-disk encryption). TrueCrypt doesn't use the TPM (and nor does VeraCrypt), because the authors didn't believe it added any security whatsoever (as it can't defend against a hardware keylogger, despite making coldboot attacks harder). TrueCrypt is vulnerable to coldboot, evil maid and the "Stoned" bootkit. Depending on your security concerns, that might be fine, it might not. Other solutions may be better when dealing with those attacks. [0] [PDF] https://opencryptoaudit.org/reports/TrueCrypt_Phase_II_NCC_OCAP_final.pdf https://opencryptoaudit.org/reports/TrueCrypt_Phase_II_NCC_O... [1] https://yro.slashdot.org/story/08/07/17/2043248/schneier-uw-team-show-flaw-in-truecrypt-deniability https://yro.slashdot.org/story/08/07/17/2043248/schneier-uw-...