summaryrefslogtreecommitdiffstats
path: root/wiki/src/install/inc/steps/create_persistence.inline.mdwn
blob: ef07ce67781340dfd776967e68e049d9c92e2037 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
<div class="trophy">

<div class="state-image debian expert mac-dvd">[[!img install/inc/infography/tails-usb.png link="no" alt="Tails USB stick"]]</div>
<div class="state-image windows linux mac-usb">[[!img install/inc/infography/final-tails.png link="no" alt="Final Tails USB stick and intermediary USB stick that can be discarded"]]</div>
<div class="state-image install-clone mac-clone">[[!img install/inc/infography/new-tails.png link="no" alt="New Tails USB stick"]]</div>

<p>Yeah, you are done installing Tails!</p>

<p>If you want to save some of your documents
and configuration in an encrypted storage on the <span class="usb">final</span><span class="clone">new</span> Tails USB stick, follow
our instructions until the end. Otherwise, have a look at our
<span class="install-clone">[[final recommendations|clone#recommendations]].</span>
<span class="expert">[[final recommendations|expert/usb#recommendations]].</span>
<span class="debian">[[final recommendations|debian/usb#recommendations]].</span>
<span class="windows">[[final recommendations|win/usb#recommendations]].</span>
<span class="mac-usb">[[final recommendations|mac/usb#recommendations]].</span>
<span class="mac-clone">[[final recommendations|mac/clone#recommendations]].</span>
<span class="mac-dvd">[[final recommendations|mac/dvd#recommendations]].</span>
<span class="linux">[[final recommendations|linux/usb#recommendations]].</span>
</p>

</div>

<h1 id="create-persistence">Create an encrypted persistent storage (optional)</h1>

<div class="step-image">[[!img install/inc/infography/create-persistence.png link="no" alt=""]]</div>

You can optionally create an *encrypted persistent storage* in the
remaining free space on the
<span class="windows linux mac-usb">final</span>
<span class="clone">new</span>
Tails USB stick to store any of the following:

  - Your personal files and working documents
  - Some of your settings
  - Your encryption keys

The data in the encrypted persistent storage:

  - Remains available across separate working sessions.
  - Is encrypted using a passphrase of your choice.

<div class="caution">

<p>The encrypted persistent storage is not hidden. An attacker in possession of
the USB stick can know whether it has an encrypted persistent storage. Take into consideration
that you can be forced or tricked to give out its passphrase.</p>

</div>

<div class="caution">

<p>It is possible to
open the encrypted persistent storage from other operating systems, but it might break
your security.
Other operating systems should probably not be trusted to handle
sensitive information or leave no trace.</p>

</div>

Create the persistent storage
-----------------------------

1. Choose
   <span class="menuchoice">
     <span class="guimenu">Applications</span>&nbsp;▸
     <span class="guisubmenu">Tails</span>&nbsp;▸
     <span class="guimenuitem">Configure persistent volume</span></span>.

1. Specify a passphrase of your choice in both the
<span class="guilabel">Passphrase</span> and <span class="guilabel">Verify
Passphrase</span> text boxes.

   <div class="tip">
   <p>We recommend choosing a long passphrase made of five to seven random words.
   <a href="https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/">Learn more.</a></p>
   </div>

1. Click on the <span class="guilabel">Create</span> button.

3. Wait for the creation to finish.

   <div class="bug">
   <p>If you close the assistant before the creation finishes, you might
   not be able to start Tails from this USB stick anymore.</p>
   </div>

4. The assistant shows a list of the possible persistence features. Each
   feature corresponds to a set of files or settings to be saved in the encrypted
   persistent storage.

   We recommend you to only activate the <span class="guilabel">Personal
   Data</span> persistence feature for the time being. You
   can activate more features later on according to your needs.

5. Click <span class="button">Save</span>.

   <div class="step-image">[[!img install/inc/infography/restart-on-tails.png link="no" alt=""]]</div>

Restart and activate the persistent storage
-------------------------------------------

1. Shut down the computer and restart on the
   <span class="windows linux mac-usb">final</span>
   <span class="clone">new</span>
   Tails USB stick.

1. In <span class="application">Tails Greeter</span>:

   [[!img install/inc/screenshots/greeter_with_persistence.png class="screenshot" link="no" alt="Tails Greeter: 'Welcome to Tails', 'Use persistence? [Yes/No]', 'More options? [Yes/No]'" ]]

   - Select your language and keyboard layout in the
     <span class="guilabel">Language & Region</span> section.
   - In the <span class="guilabel">Encrypted Persistent Storage</span> section,
     enter your passphrase and click <span class="button">Unlock</span> to activate the encrypted
     persistent storage for the current working session.
   - Click <span class="button">Start Tails</span>.

1. After 15&ndash;30 seconds, the Tails desktop appears.

1. You can now save your personal files and working documents in the
<span class="guilabel">Persistent</span> folder. To open the
<span class="guilabel">Persistent</span> folder choose
<span class="menuchoice">
  <span class="guimenu">Places</span>&nbsp;▸
  <span class="guimenuitem">Persistent</span></span>.

<div class="trophy" id="recommendations">

<div class="state-image debian expert">[[!img install/inc/infography/tails-usb-with-persistence.png link="no" alt="Tails USB stick with persistent storage"]]</div>
<div class="state-image windows linux mac-usb clone">[[!img install/inc/infography/final-tails-with-persistence.png link="no" alt="Final Tails USB stick with persistent storage"]]</div>
<div class="state-image mac-dvd">[[!img install/inc/infography/tails-usb-with-persistence.png link="no" alt="Tails USB stick with persistent storage"]]</div>

<p>You now have a working Tails, congrats!</p>

<h3>Final recommendations</h3>

<div class="row">

  <div class="col-md-6">

    [[!img lib/admon-caution.png link="no" alt="" class="float-left"]]

    <p>Tails does not protect you from everything! Have a look at our
    [[warnings|doc/about/warning]].</p>

  </div>

  <div class="col-md-6">

    [[!img lib/help-browser.png link="no" alt="" class="float-left"]]

    <p>If you face any problem, use the <span class="guilabel">Report an
    error</span> launcher on the Tails desktop or visit our [[support
    pages|support]].</p>

  </div>

</div>

<p>We hope you enjoy using Tails :)</p>

</div>