Storage forum: How can I secure my external hard drive?

My Laptop uses Truecrypt. I'm not encrypting the entire drive (the first partition is just a Windows XP SP2 install area that will return the PC to original state) but the main partition is encrypted. Effort? The enctyption takes time but you can start using the drive right away. You MUST make a recovery CD. Not a big deal but need to have a CD drive and blank CD available, etc. (No data on the CD, just a set of keys, and stuff to recover your drive). Unfortunately, I have no experience with the portable part of this.

Your suggestion is a great one--except for one thing: You didn't read all that he said.

He said, <<the data on the drive must be accessible using any PC
computer whether it is mine or another person's>>.

Now that blows up your idea of using TrueCrypt, or programs like it, because not everyone has it installed on their computer. I, for one, have never heard of it until now, but I'm familiar of other such programs.

The problem with those programs (including TrueCrypt) is that it will only work if the program is installed on the computer that he wants to use. However, as he has clearly stated, he isn't using it on just his own computers, but on others as well.

That leads to another problem: The only way he can use it on a computer that doesn't have it installed is to install it himself. However, not too many people are keen on you borrowing their computer and then installing something on it, and most public places block you from installing things on their computer.

He's asking if there is a better solution than TrueCrypt--or another program like it.

I've never used TrueCrypt, so when I read what "luhng" said, in his post directly above mine, about needing "a temporary installation of a programme", I assumed he meant that one needs to install it, use it, and then uninstall it from that computer.

I tried the one what was embedded into Trend Micro Internet Security when I Beta tested it a couple years ago. I remember I didn't like it because I think it only made the security file on the C: drive--and in a place where they thought it should be, and I wanted to make it on the E: drive, where I have my "My Documents" folder.

Then I think I uninstalled the program and re-installed it--and it wouldn't open the encrypted file. I guess I mistakenly assumed that they're all the same. In addition, I'm not really interested in those programs because if you forget the password, not only does it not work, but you lose all your important data.

Thanks for filling me in on that!

I have about 200gb of data on a 350gb EXT Esata drive. It makes perfect backups. In order to use TC, I would have to create a new TC container, and then move the data into that container? So my backup software would then have to know the drive/directory of this new location to make future backups, eh?

I decided the Aegis Padlock is the one for me. It is the one most mentioned and will keep private my records and media. I especially like the "self destruct" feature. And yes I will pull the external HDD out monthly and back up the Aegis data. Then store the drive in a fireproof safe I have. Suspenders and belt! Bob

I very much realize the need for privacy and security. For the most part, I don't keep secure data unless absolutely necessary. If the data did not need to be secure, I'd suggest using online clouds to store the data such as Google Docs or Dropbox, but, since the data must be secure, I would not suggest the use of public clouds as employees there read your stuff, according to their websites. If this was medical data (HIPPA-controlled) or criminal justice data (CJIS) or credit card info, I'd definately use a fully encrypted drive! Do NOT use anything that is only password protected as many devices can still read the data! Make sure the data is encrypted with something that is military standard. Normally, I'd say you can just look around the web and use whatever appeals to you but I don't know how critical the data is to you or to some government agency that regulates the data on your drive.

As someone else mentioned, I use Truecrypt.

These sound interesting but can you take one on an airline and through the TSA with a self-destruct feature? How destructive can it get?

He said he doesn't want to break the bank - he probably already bought one drive.

....brave little toaster....

I REALLY wish you luck with that endeavour.

BUT, here in America, the rest of the world AND the government all think they need into your business.

I would NOT trust a 'cloud' to save my Aunt Emma's cookie recipe...too many dirty fingers in the mix.

L-8-R-B.

IF you use that info online...cut the cord!

that does not allow any access to customers blobs. They don't have any of the keys. However, the guy did ask not to break the bank, and the name of this service escapes me at the moment, so I can't check on prices.

Hi Bob

Based upon your comments I deduced the following:

You've tried software based security programs and found them to be ineffective for your needs.
I would not suggest investing in those types of solutions again - free or paid. But, if you're still inclined to consider them here's a link with reviews of several programs. One of them or a suggestion by another contributor may be the ticket (consider only those that have a "portable" option): http://encryption-software-review.toptenreviews.com

You're concerned about "Prying" Eyes
I'll address this in my recommendations

You're concerned about losing your drive.
Suggests that a garden variety two (2) inch flash drive is not your best choice even though they may be had in 128GB capacity. However, SanDisk makes a Cruzer Fit USB Drive (with built in security software) that can remain in your Laptop even when stored. It's the size of a nano USB transmitter. The limitation for you may be capacity at 32GB. Check it out here: http://www.sandisk.com/products/usb/drives/cruzer-fit/

Conclusions
1. Judging from your comments (previous experience) software encryption programs don't appear to be a viable solution regardless of the physical size of the drive (i.e. pocket size or Thumb drive).

2. Thumb drives are definitely not an option given their small size making them more prone to be lost not to mention their meager capacity.

3. Cloud based storage might be an option but requires a WiFi or paid cellular connection. Even assuming you are never away from a good WiFI signal - free Cloud based storage usually tops out at 2GB-10GB, so you would probably incur more expense with Cloud storage. Then there are other Cloud based security issues...not that they are common...but have you read about the recent Dropbox breach?

Recommendations
So, having said all the above what's a viable solution? Consider the following:

1. Portable HD that's big enough (physical size) not to go unnoticed when you are done using it.
2. Security encryption software built-in
3. High enough price point so that you will think twice before leaving it behind

My personal recommendation would be the Aegis Padlock by Apricorn:

1. Military Grade Encryption
2. Software free design
3. Requires PIN to gain access - entered directly on the drive itself
4. Timed lockdown after inactivity
5. Secure Lockdown after repeated incorrect PIN entries requiring reset
6. Works with Windows, Mac and Linux
7. MSRP $169 - $249 (depending upon 128 or 256 bit Encryption and/or 250GB -1TB capacity)
8. http://www.apricorn.com/products/hardware-encrypted-drives/apricorn-padlock-usb3.html

Bob, I didn't forget your comment about- "Prying Eyes'
1. If this is a screen issue I suggest you invest in a "screen privacy filter" similar to these. Click the link:
http://solutions.3m.com/wps/portal/3M/en_US/3MScreens_NA/Protectors/Shop_Products/Product_Catalog/~/Privacy-and-Screen-Protectors/Privacy-Filters?N=5019651&rt=c3
2. If you leave your laptop unattended in what you perceive to be a secure area then I suggest you set your password lock or log-off before you leave the room.

We all should remember that security begins with the user. Theft of a laptop or portable HD from a secured location may occur - bad things sometimes happen to good people. Treating our precious gear like a pair of "sunglasses" no matter what security software or Kensington Lock like device is installed - is just plain foolish.

Good luck Bob...I hope you find the right solution!

Together Everyone Achieves More

Securing data can often lead to more problems and hassles then it is worth. You did not mention why you want to encrypt your data nor the size or type of data files you have and need to transport on a USB drive, so it makes recommending a solution a little more difficult.

There are many different ways to secure data and the best choice usually depends on several factors:

Why you want Encryption? - There are many different reasons for wanting to encrypt your data that can range from simply just not wanting someone to get hold of your personal information should you lose your computer or hard drive to being required by your employer or by the law. If you are carrying other peoples personal data, you may be liable in some states if that data gets into the wrong hands.

How much data you have? - Protecting a few word documents vs. several hundred gigabytes of data in hundreds of files could be approached in totally different ways. For Example: If you had a half dozen Word or Excel files that you were worried about then using the built-in password protect feature in Word and Excel may just fit the bill. Note: Password Protection on Versions of Word and Excel prior to 2007 are NOT very secure.

How often you need to access it? - The amount of time or number of steps you need to perform to access your data can really end up being a real burden if you need to access your data many times per day on many different computers. On the other hand if you only have to get to your data once a week or once a month then it may not be a big issue at all.

The number of computers or the number of different types of computers that you need to be able use to access the data? - If you are accessing your data on only 1 or 2 different computers then installing the encrypting software may not be a big deal, but on the other hand if you are accessing the data on many different computers some with administrative rights and others without, it could end up being a real pain in the neck. Example: Most encrypting software requires that you install a small application on every computer that needs access to the data, this can be a real pain and not work at all on computers without administrative rights. Also I have had many issues when trying to use these techniques on old computers running Windows ME, Windows 2000 or Windows 98/95, Linux or even older Mac's.

How much effort you are willing to go through to access the files? - If security is more important to you then your time, then using whole drive encryption techniques like TruCrypt or BitLocker may be the way to go.

Who needs access to the files? - If you are the only one dealing with the secure files then the additional steps to access data may not be an issue but if the files need to be accessed by many individuals this could present a problem.

The level of Security you need? -There are many different levels of security ranging from simple password protected files to whole drive military grade encryption and many levels in between. If you are just trying to protect documents from your kids or babysitter opening them by mistake, then simple password protection may fit the bill, but if you have sensitive data that you do not want anyone to be able to access should you lose your hard drive or computer then that is a different story and you will need to look into full encryption in some form or another. Some states such as Massachusetts require that anyone that has personal information stored on their computer about anyone else that resides in that state must encrypt the data. Most all healthcare companies, hospitals and such now require that all laptops have encrypted hard drives if they are being used to access company email or other information.

WAYS TO STORE AND SECURE DATA?

Simple Single File Password Protection - Older Versions of Microsoft Word and Excel offer simple password protection that can be applied when saving files. With the right tools, these files can be accessed with relative ease.

Single File Encrypted Password Protection - Starting in with the 2007 version of Office, Word and Excel now offer password protected Encryption that is applied when saving files. Again if you are only concerned about a few files then this might be the best option. Keep in mind that when setting a password, the security is based on the quality of your password. So avoid using "1234" or "Password" as your password.

Partition Encryption - Most encryption software offer the ability to encrypt just a partition of your hard drive or the entire hard drive. TrueCrypt or BitLocker in Windows Pro offer this type of encryption.

Whole Drive Encryption - TrueCrypt offers both partition and whole drive encryption. Professional version of Windows such as Windows XP Professional, Vista Professional and Windows 7 Professional also offer BitLocker Encryption. There are also many other 3rd party security companies that offer encryption software such as McAfee and others.

Drives with Built-in Encryption - Apricorn has a really neat line or Hard drives and USB Flash drives called AEGIS Padlock and Secure Key that have a built-in Keyboard where you simply enter a secret code into the keypad before you plug the drive into the USB port. This saves you from having to install any software on any computers. http://www.apricorn.com/media/uploads/Apricorn_Aegis_Padlock_3-0_Datasheet.pdf and http://www.apricorn.com/products/hardware-encrypted-drives/aegis-secure-key.html

Online Storage - Don't forget about online storage of data too. There are many online storage systems that offer encryption and may be much more convenient for you but again it depends on all the factors I mentioned above. For Example: If the files sizes are very large, then online storage would take a lot longer to access vs. a USB drive or maybe the computers that you need to access the data from are not connected to the internet of have a really slow Internet connection which could rule out this kind of storage.

Create your own Cloud storage - If you are not comfortable with Online storage then you could also purchase your own NAS(Network Attached Storage) that offers access from the internet. Then you can access the data from any computer that needs it without having to carry around any hard drives that could fall into the wrong hands or get lost or dropped. There are many NAS devices out there from all the manufacturers but I really like the products from Synology.

WARNING: Encrypting a hard drive can make it much more difficult if not impossible to recover data if something goes wrong with the hard drive. So, if you must encrypt, make sure you are covered with multiple backups of your data.

WARNING 2: Backup your data prior to implementing any encryption scheme. It is not uncommon for something to go wrong, especially when encrypting an entire drive or a computer for the first time.

WARNING 3: Encryption can slow down drive access which can be especially noticeable on older computers.


Personally, I prefer to not carry around data on external hard drives because they are so easily damaged, dropped, lost or stolen. Sometimes, all it takes is placing the hard drive down on a hard surface a little too hard and suddenly all your data is gone.


Dana
Wayland Computer

Thank you for your comments. Actually, many online storage systems allow you to hold the encryption key instead of them (the default is for them to manage the encryption key). If you chose this option, you can create your own encryption key and even their employees can not access your data. However, if you happen to loose the key, your data is hopelessly lost forever.