secure-os.org
All guidesQubes OSTailsWhonixHardened LinuxDisk encryptionThreat model
tails

Tails Persistent Storage: How to Set It Up (and Fix It When It Won't Unlock)

secure-os· Updated June 29, 2026· 6 min read #tails#encryption#persistence
A black USB flash drive resting on a laptop keyboard, used here to illustrate a Tails drive with an encrypted persistent volume

Quick answer: Tails is amnesic — it boots from a USB stick, holds everything in RAM, and forgets your session at shutdown. The Persistent Storage is an optional LUKS-encrypted volume on that same USB stick that keeps the data you explicitly choose between sessions. You create it once, protect it with a passphrase, and unlock it on the Welcome Screen at startup. It does not make the whole system persistent — only the options you switch on survive; everything else stays amnesic.

Use it when you need to keep your own files, bridges, or app settings across reboots — and understand that it trades away some of the amnesia that is Tails’ core protection.


When (and When Not) to Use It

Turn on Persistent Storage when:

  • You reuse the same Tails stick and want to keep personal documents, GnuPG keys, or SSH keys.
  • You connect through a Tor bridge every time and don’t want to re-enter it.
  • You install Additional Software that must be present at each boot.

Stay fully amnesic when:

  • You boot from an untrusted location and want zero local trace.
  • You only need a clean, throwaway session.

For background on the amnesic design itself, see our Tails OS guide.

Prerequisites (Tails Installed on a USB Stick)

Persistent Storage only works on a Tails drive installed with the Tails installer. It does not work if you boot Tails from a DVD or any read-only medium, because there is no writable partition to host the encrypted volume.

  • You need Tails installed to a USB stick (8 GB minimum) using the official installer — see our step-by-step Tails USB install guide.
  • The same stick will hold both the Tails system and the Persistent Storage; they share the device.

Create the Persistent Storage (Steps)

In Tails 5.8 and later, Persistent Storage is managed through a dedicated app rather than the old configuration assistant.

  1. Boot Tails and reach the desktop.
  2. Open Applications → Tails → Persistent Storage.
  3. When prompted, choose a strong passphrase. This passphrase is the LUKS key — it is the only thing that protects the volume.
  4. The volume is created and encrypted with LUKS on the free space of your Tails stick.
  5. Toggle on the features you want to persist (see the next section). Each feature is an independent switch.
  6. Some features take effect immediately; others apply after you restart Tails and unlock the storage on the Welcome Screen.
A metal padlock sitting on a laptop keyboard, illustrating the LUKS passphrase that protects the encrypted Persistent Storage volume
A padlock on a laptop keyboard — the LUKS passphrase is the only key to the encrypted Persistent Storage; lose it and the data is gone.

What You Can Persist

Persistence is opt-in per feature. You decide exactly what survives a reboot; everything you don’t enable stays amnesic. Common toggles include:

FeatureWhat it keeps
Persistent FolderYour own files, stored in a Persistent folder
Welcome Screen settingsLanguage, keyboard, and other startup options
Tor BridgeA bridge you configure to reach the Tor network
Network connectionsSaved Wi-Fi passwords and connections
Browser bookmarksTor Browser bookmarks
PrintersPrinter configuration
Additional SoftwareExtra packages reinstalled at each boot
DotfilesCustom configuration files in your home directory
GnuPGOpenPGP keys and configuration
SSH ClientSSH keys and known hosts
Pidgin / ThunderbirdChat and email account settings

Enable only what you genuinely need — each switch you turn on writes more of your activity to disk.

Unlocking It at Startup

The Persistent Storage is unlocked on the Welcome Screen, before the desktop session starts:

  1. Boot the Tails stick.
  2. On the Welcome Screen, find the Persistent Storage section.
  3. Enter your passphrase and unlock.
  4. Continue starting Tails — your enabled features are now available.

If you skip this step at boot, your persistent data simply isn’t loaded for that session; it is not lost, you just have to reboot and unlock it.

”Persistent Storage Not Unlocking”: Causes and Solutions

If the volume won’t unlock, work through these honest causes in order:

CauseWhat’s happeningWhat to do
Wrong passphraseLUKS rejects the keyRe-enter carefully; mind keyboard layout/caps lock. There is no reset — the passphrase is the key
No Persistent Storage on this stickIt was never created, or created on a different USBConfirm you’re booting the correct stick; create it if it doesn’t exist
Stick reinstalled or resetReinstalling Tails can remove the volumeA fresh install means a fresh (empty) drive — the old volume is gone
Old version, missed promptOn older releases the unlock is on the Welcome Screen and easy to overlookReboot and look specifically for the Persistent Storage field on the Welcome Screen
Filesystem corruptionThe volume or its header is damagedIf you have a backup, restore it; a corrupted LUKS header may be unrecoverable

The hard truth: if you lose the passphrase, the LUKS-encrypted data is irrecoverable. There is no backdoor and no recovery key — that is the whole point of the encryption. The same LUKS principle protects any encrypted disk; see our LUKS encryption guide for how the key slots and header work.

The Security Trade-Off (Reduced Amnesia)

Persistent Storage is genuinely useful, but be clear about what it costs:

  • It reduces Tails’ amnesia — the very property that makes Tails strong. Anything you persist is written to disk and survives the session.
  • The volume is encrypted, but its existence is not hidden. There is no plausible deniability — an examiner can see that a Persistent Storage exists on the stick, even if they can’t read it without the passphrase.
  • It does not persist the whole system. Only the features you enabled survive; the operating system itself remains amnesic for everything else.

Practical guidance: enable the fewest features that meet your need, store only what’s necessary, and use a strong passphrase. If a particular session doesn’t need persistence, don’t unlock it — boot purely amnesic instead.


Conclusion

The Persistent Storage is the answer to Tails’ biggest day-to-day friction: by default it forgets everything. With a single LUKS-encrypted volume on the same stick, you keep exactly the files, keys, and settings you choose — and nothing more. Create it from Applications → Tails → Persistent Storage, protect it with a strong passphrase, and unlock it on the Welcome Screen at each boot.

But treat it with discipline. Every feature you persist chips away at the amnesia that makes Tails worth using, and a lost passphrase means the data is gone for good. Enable only what you need, back up what you can’t afford to lose, and remember that the encrypted volume hides its contents, not its existence.