Security Considerations of Persistence
Trade-offs between amnesic plausible deniability and persistent storage.
1 min readUpdated: 2026-11-12
Security Considerations of Persistence
While Encrypted Persistence provides convenience by retaining cryptographic keys, bookmarks, and configurations, it fundamentally alters the threat model compared to a pure amnesic session.
Key Trade-offs
- Plausible Deniability: A USB drive running purely in amnesic mode contains only read-only distribution files. Once persistence is formatted, the physical flash drive contains an encrypted partition header, revealing that persistent data exists.
- Wear-Leveling on Flash Memory: Removable flash drives employ internal controller wear-leveling algorithms. Deleted data may remain in reserved flash blocks until overwritten by new block allocations.
- Passphrase Strength: The security of your persistent data is entirely contingent on the entropy of your passphrase. Always choose a strong passphrase (20+ characters or 6 random Diceware words).