Version Information

Tools -> Keyfile Generator 
You can use this function to generate a file with random content, which you can use as a keyfile 
(recommended). This function uses the TrueCrypt Random Number Generator. Note that the 
resulting file size is always 64 bytes (i.e., 512 bits), which is also the maximum possible TrueCrypt 
password length. 
Settings -> Default Keyfiles 
Use this function to set default keyfiles and/or default keyfile search paths. This function is 
particularly useful if you, for example, store keyfiles on a USB memory stick that you carry with 
you. You can add its drive letter to the default keyfile configuration. To do so, click Add Path, 
browse to the drive letter assigned to the USB memory stick, and click OK. Now each time you 
mount a volume (and if Use keyfiles is checked in the password dialog), TrueCrypt will scan the 
path and use all files that it finds there as keyfiles.

---

70 
WARNING: When you add a folder (as opposed to a file) to your default keyfile list, only the 
path is remembered, not the filenames! This means e.g. that if you create a new file in the 
folder or if you copy an additional file to the folder, then all volumes that used keyfiles from 
the folder will be impossible to mount (until you remove the newly added file from the 
folder). 
 
IMPORTANT: Note that when you set default keyfiles and/or default keyfile search paths, the 
filenames and paths are saved unencrypted in the file Default Keyfiles.xml. For more information, 
please see the chapter TrueCrypt System Files & Application Data. 

---

71 
Security Tokens & Smart Cards 
TrueCrypt supports security (or cryptographic) tokens and smart cards (smart card readers) that 
can be accessed using the PKCS #11 (2.0 or later) protocol [23]. For more information, please see 
the section Security Tokens and Smart Cards in the chapter Keyfiles.  

---

72