search

veracrypt / VeraCrypt

Disk encryption with strong security based on TrueCrypt
https://www.veracrypt.fr
Other
6.9k stars 947 forks source link

Recover partitioned deleted Veracrypt Partition #790

Open kikieri opened 3 years ago

kikieri commented 3 years ago

Hey Guys, I had an encrypted Veracrypt Partition mounted from an external Storage and went to my Filemanager on Macosx when I had an other USB Drive mounted and accidentaly formated my Ecnrypted Partition to FAT32 empty. Is there any way to recover my files. I didnt touch anything afterwards.

viciousvex commented 3 years ago

Yes. There should be a way, because a FAT32 partition does not overwrite the end of the volume (which contains a backup VeraCrypt header). Look here for instructions on how to restore the backup header: https://veracrypt.fr/en/Program%20Menu.html#tools-restore-volume-header

kikieri commented 3 years ago

I recovered my Volume Header. I can mount the drive. But still it just show the formated FAT drive again. Data of the osx should be still there. What to do?

karakuraizer commented 2 years ago

I recovered my Volume Header. I can mount the drive. But still it just show the formated FAT drive again. Data of the osx should be still there. What to do?

now when you mounted your encrypted recovered partition you can try to use any software made for scanning FS for any deleted data, wish you a good luck=) i've used r.saver in win env to recover some data from damaged FS of encrypted container used to be stored on usb flash a few hours ago, got lucky