Tails Persistent Storage Explained What It Saves and the Risks
Tails forgets everything - except what you deliberately tell it to remember. Persistent Storage is that one exception, encrypted on your USB stick. Here is how it works and what it costs you in risk.
✍️ Technical Anshu🐧 Linux Privacy⏱️ 7 min read
🎥 Watch the full Tails OS review in the video - first boot, features and settings shown live
A system that forgets everything is safe but inconvenient: your documents, your email settings, your passwords, gone at every shutdown. Tails answers this with Persistent Storage - an optional, encrypted area on the same USB stick, unlocked with a passphrase at boot. It is one of the most misunderstood parts of Tails, so this page goes through it carefully: what it holds, how the encryption protects it, and the honest risks that come with switching it on.
Persistent Storage - what survives a shutdown
Documents you save thereKept, encrypted
Browser bookmarks and settingsKept, if enabled
Email accounts and keysKept, if enabled
Everything outside itStill forgotten
Only the categories you switch on inside Persistent Storage survive. The rest of the session stays amnesic, exactly as before.
1
How to Create It
Boot Tails and, at the desktop, open Applications → Tails → Persistent Storage
Choose a strong passphrase - this single passphrase is the key to everything inside, so make it long and unique
Tails creates an encrypted volume in the free space of your USB stick (the encryption is LUKS, the standard Linux disk encryption)
Pick which categories to keep: personal documents, browser bookmarks, network settings, email data, encryption keys, an additional software list, and more
From the next boot, unlock it at the Welcome Screen when you need it - or skip unlocking and run a fully amnesic session
2
What It Actually Saves
Persistent Storage is not a general second hard disk. It saves specific categories you enable, each wired into the right place in the system:
Your files - a Persistent folder for documents you are working on
Browser state - Tor Browser bookmarks, so your reference links survive
Communications - Thunderbird email accounts and your encryption keys, so contacts do not have to re-verify you every session
System choices - Wi-Fi passwords, printer settings, and a list of extra software packages to reinstall automatically at each boot
Everything you did not enable still vanishes. Persistence in Tails is a set of labelled drawers, not an open cupboard.
3
How the Encryption Protects It
The volume is encrypted with LUKS using your passphrase, the same technology that protects full-disk encryption on Linux. With Tails switched off, the stick holds only ciphertext: plug it into another computer and the Persistent area is unreadable without the passphrase.
Two consequences follow. A strong passphrase is not optional decoration - it is the entire lock, so length beats cleverness. And if you forget the passphrase, the data is gone; there is no recovery service and no back door. That is what real encryption means, in both directions.
4
The Risks It Adds - The Honest Half
Switching on persistence trades away a slice of the amnesic promise. Be clear-eyed about the price:
It proves a Tails user kept data. The encrypted volume's existence is visible on the stick even if its contents are not. For some threat models, that fact alone matters.
It can link your sessions. Saved bookmarks, accounts and keys are continuities between sessions - exactly what the amnesic design exists to break. Every category you enable is a thread tying today's session to yesterday's.
A running, unlocked session exposes it. While Tails is booted and the volume is unlocked, malware or an attacker with access to the live session can reach what is inside, just as with any unlocked encrypted drive.
It makes the stick a target. A plain Tails stick holds nothing of yours. A stick with persistence holds your working life - losing it is a bigger event, even encrypted.
5
The Sensible Middle Way
Most experienced users land on a balanced setup. Enable persistence only for what genuinely repeats - often just documents and encryption keys. Keep the passphrase strong and written down somewhere safe offline. And remember the choice at every boot: unlocking is optional each time, so a session that does not need your saved data can still run fully amnesic.
Used that way, Persistent Storage is not a betrayal of Tails' idea. It is the idea, refined: nothing survives unless you decided it should.
🔴 Upgrading matters: always upgrade Tails, never reinstall it fresh on the same stick, or you will erase your Persistent Storage. The official site repeats this warning on every release page - automatic upgrades keep your saved data; a new installation wipes it.
🎬 Watch the Complete Video for Full Knowledge and Installation
Watch Persistent Storage being created and unlocked in the full review video, before you trust your own files to it.
Can I use Tails without Persistent Storage at all?
Yes - it is entirely optional and off by default. Many users never create it. You simply lose your files and settings at every shutdown, which for some threat models is precisely the point.
What happens if I forget my Persistent Storage passphrase?
The data cannot be recovered - by you, by the Tails project, or by anyone else. There is no reset option on real encryption. Keep the passphrase written down somewhere secure and offline.
Does Persistent Storage store my browsing history?
No. It can store Tor Browser bookmarks if you enable that category, but your history and session data are part of the amnesic layer and are still wiped at shutdown.
This guide is based on the Technical Anshu video Tails OS Review Is This the Most Private Linux OS • Stuck on any step? Ask in the video comments - you will get an answer there 🙏