Ifinstead of fully encrypting the hard drive or encrypting the partition on which Windows is installed, I just encrypt a partition where I store my sensitive information, will it increase the chances of my data getting stolen(in comparison to the other alternatives) if my device gets stolen?
If you have a recovery partition in your disk, this one should not be encrypted, but you should encrypt all windows partition be them system or data if you want to be super safe, or only the sensitive data partition if you can accept that an attacker could find traces in temp or swap files.
The initial encryption time does not really matter IMHO. It happens only once. But 10 hours for 150 Gb seems rather weird. SATA disk io throughput should allow around 100Mb/s, so encrypting 150Gb should not exceed a couple of hours.
Encrypt the whole disk. The overhead is negligible, and you don't have to worry about someone stealing your computer and having all your data. And if you have to send your computer to repairs, you don't have to worry about stolen files or compromised applications.
Another benefit is that all data is encrypted by default, so you don't need to keep a mental process of copying sensitive data from the unprotected partition to the protected one. And if you need double protection, create a VeraCrypt volume and use it.
One benefit of encrypting only a partition vs the whole drive is that you can encrypt/decrypt the partition while using the system for other tasks, so you can encrypt it "on demand" so to say, but if you encrypt the whole disk it's decrypted every time you start up and authenticate the system.
In terms of security, as you say, if the machine gets stolen, I would say there isn't much difference between FDE and an encrypted partition in such a scenario. If you use strong encryption on your partition it's highly unlikely that your data will be compromised.
I'd say there is some benefit to using an encrypted partition / folder vs FDE if you only decrypt it when you need to access or store sensitive information and encrypt it again when you're done, so that you don't leave the filesystem in an unencrypted state all the time when you're logged in, as would be the case with only FDE.
Without having more information on the application, FDE is always the safest bet. However, for less critical data and unsophisticated attackers, an encrypted partition or virtual hard drive is probably enough.
The problem is that when you leave the Windows partition unencrypted, then you will also have an unencrypted pagefile (where Windows stores application memory when running out of RAM) and hibernation file (where Windows dumps the RAM when hibernating). When you are working with confidential data stored on your encrypted hard drive, then their content might end up in these files.
There are also other places on the system drive where confidential data might show up (depending on what information you consider confidential, of course). One thing I would always want to be encrypted is the C:\Users directory, because all kinds of applications use it to store temporary (and not so temporary) files. Whenever you view or edit a confidential file, the software you use for viewing might store information about that file in your user directory. When you are sure that you will only use programs to work with confidential files where you know that they won't ever do this, then this might not be a concern. But are you sure about this?
I cannot foresee any shortcomings with this method of encrypting a partition. I often use full disk encryption with encrypted containers within, 7z AES256 archives. So, layers of encryption. I would advise you review which AES-XTS bit size is used, and swap to AES256-XTS, as more rounds, is used. HowToGeek outlines how to use Local Group Policy Editor to change the encryption cipher used.
When you format an internal or external storage device, you can encrypt and protect it with a password. If you encrypt an internal device, you must enter a password to access the device and its information. If you encrypt an external device, you must enter the password when you connect the device to your computer.
Cloudwards.net may earn a small commission from some purchases made through our site. However, any earnings do not affect how we review services. Learn more about our editorial integrity and research process.
Encrypting an external drive ensures the highest level of data protection. There are several ways to encrypt an external hard drive, with built-in software or third-party apps being the most prominent. This guide will cover the most accessible ways and teach you how to encrypt external hard drives.
The encryption process works by using a mathematical algorithm to scramble your data, preventing unauthorized access. Only a password of your choosing can decrypt it. Most OSs have built-in encryption software, making it easy to encrypt your hard drive. However, if you want something stronger, you can opt for third-party encryption software.
As you will see in the following sections, you will need a password to decrypt the hard drive before accessing its contents. However, if you lose or forget your password or misplace your recovery passkey, you will lose access to your data.
With full disk encryption, your data will remain private should the unexpected happen and someone unauthorized tries to access your content. Your data will remain protected against anyone who does not have the password to decrypt the external hard drive.
Mac operating systems come with the Disk Utility application. You can use it to encrypt external hard drives in a few short steps. Macs also have the FileVault app, which encrypts your hard drive. It does not work for encrypting external hard drives.
Many third-party encryption apps exist, including those we feel are the best encryption software available. One such option is Cryptomator. Once you download and install the app, you can encrypt your external drive in a few short steps.
You can encrypt a USB flash drive following the same steps as above, depending on what you use to encrypt it. You can use Disk Utility on Mac, BitLocker on Windows or a third-party encryption software like VeraCrypt. The process of encrypting a USB is identical to that of an external drive.
Another option with some providers is to use a cloud backup to encrypt your external drive. IDrive is a cloud backup service that can accomplish this task. When connected to your computer, IDrive will recognize the external drive and allow you to select it for backup.
By default, IDrive does not have private encryption. However, when you first create an account, you have the option to enable private encryption. Doing so ensures the highest level of privacy for your data. Anything you back up to your private encryption-enabled IDrive account will have the same level of protection.
IDrive is our pick for the best online backup service. It has many features to manage your backups, including cloud storage functionality like file sharing. An IDrive account has separate storage space for your backups and your cloud storage drive folder. Additionally, you can back up multiple devices to one account.
IDrive has an excellent desktop app for Mac and Windows, with several tabs to manage your account. One tab includes robust scheduling tools, while another lets you restore data from a previous backup. The mobile app for iOS and Android devices contains tools to upload your images automatically. We have more details in our IDrive review.
Encrypting your external drive is the best way to protect your data. Depending on your operating system, you can use built-in encryption software like Disk Utility on Mac or BitLocker on Windows. Another option is to use third-party disk encryption software such as Cryptomator. No matter which method you choose, you can rest easy knowing your data is secure.
Do you encrypt your external drive? Have you used any of these methods to encrypt an external hard drive? Are there other ways to encrypt an external hard drive that we missed? Let us know in the comments section below. Thanks for reading our article.
Encryption software that comes with an operating system, such as BitLocker on Windows or Disk Utility on Mac, are excellent tools for creating an encrypted volume. Third-party encryption software such as Cryptomator is also a great option.
Hello, i have a WD passport which was easy to set up password using WD software, baught the WD 4 tb elements, was not aware than it is not supported by softwared to encrypt & formulate a passwor.
Now how can I encrypt & make a password like WD passport or is that not possible & have to use tidious encrypting programs which take forever to encrypt even small parts
please help
thanks
The Elements line of drives were created for customers who specifically did not want onboard drive encryption or password protection. You would need to use another 3rd party program to perform these tasks.
Concerning Encryption/Password Protection, you may want to try BitLocker, the native drive encryption system of Windows. Now, depending on the size of your WD Elements, and how much files it has. it may take a few minutes to several hours. Mine took 10 hours to finish encrypting because I got 1.2Tb of data already on my drive. My advice before trying to use BitLocker is to make sure your WD Elements is empty.
I am trying to password protect an old flash drive with my MacBook. I have tried everything I can find online to get it to work. When I right click from the Finder, I don't have the "Encrypt" option. It's not even in the drop down menu. When I erase the flash drive from Disk Utility, I don't have any of the formatting options that allow me to set a password. I feel like I have tried everything and can't seem to figure this out.
If all else fails format it OS X Extended (journaled) and put an encrypted disk image on the drive nearly filling up the flash drive but not quite. Then you'll need to enter a password before opening the disk image to get at the enclosed files. Not perfect but a workaround.
3a8082e126