Veracrypt

Cross-platform disk and file encryption, based on TrueCrypt.

Supports strong encryption algorithms (e.g., AES, Serpent), as well as Hidden Volumes for plausible deniability.

Has both a GUI and a Command Line interface.

Alternatively, on macOS, you can also create basic encrypted file volumes using the native mac tools as concisely documented on the Mac page.

Install

For Apple Silicon, it's recommended to install the Fuse-T version.

On macOS, this downloads the installer:

package="veracrypt-fuse-t"

brew install "$package"

Then find the downloaded package installer:

pkg="$(brew ls --verbose "$package" | grep '\.pkg$' | tee /dev/stderr)"

It'll print the package path, eg:

/opt/homebrew/Caskroom/veracrypt-fuse-t/1.26.24/VeraCrypt_Installer.pkg

Run the GUI installer package:

open "$pkg"

Follow the GUI prompts to complete installation.

Note: re-running the installer will not detect that it's already installed and appears to just overwrite the installation.

Create a 100 MB volume with a cascade of three encryption algorithms for strongest layered security:

veracrypt --create /path/to/volume --encryption AES-Twofish-Serpent --hash sha-512 --size 100M --password "$password"' --volume-type normal