VeraCrypt has been tried and tested but it appears to perform poorly on modern NVME devices due to inherent limitations in its TrueCrypt based architecture. As

VeraCrypt has been tried and tested but it appears to perform poorly on modern NVME devices due to inherent limitations in its TrueCrypt based architecture. As a Windows FOSS alternative, you can consider DiskCryptor. However, unlike VeraCrypt, it has not been audited (to my knowledge) and lacks many QoL features. Use at your own discretion. It is being maintained here: https://github.com/DiskCryptor/DiskCryptor https://github.com/DiskCryptor/DiskCryptor