“Any concerns with VeraCrypt are even worse for TrueCrypt (which is abandoned).”
It’s been abandoned for over eight years.
What is with this loyalty to abandoned software which had its own security concerns, of which open-source developers addressed these very issues when they forked it into VeraCrypt?
