I try not to mess with my my current windows desktop setup too much if I don’t have to (mission critical). It’s not on VM.
Would love to do it with LUKS/EXT4 if possible but it’s not supported on windows (am I correct?)

If I use VC then I have to install it on both win and linux and also any additional machine I intend to decrypt with, that’s quite unwieldy compare to LUKS. I also have lobotomized my current install to cripple spying and broke it to the point it can not update to support wsl.

Seems like bitlocker is a proper solution for the moment. Or just do two partitions (maybe two drives), encrypt one with LUKS, wipe everything unencrypted when done using it.

I’m still a bit confused with veracrypt… The docs make it sounds like vc use its own format.
Can the drive be prepared with LUKS and then decrypt in windows with veracrypt? If not, I might just use bitlocker until I drop windows.

That, I didn’t think of. Still… I will eventually have to do it the linux way, might as well learn and familiarize with it now.

Forgot to mention that it will be quite a while before I can drop windows completely but for sure I’m not upgrading or doing another windows install.