Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Full disk encryption for Windows 8.1 (TrueCrypt alternative?)


  • Please log in to reply
17 replies to this topic

#1 VioD

VioD

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 04:34 AM

Hello again. I just posted an intro as I'm new here, but I thought I'd post specific question that I'm eager to have behind me.

 

I recently purchased a new laptop that has Windows 8.1. I'm not quite sure what I think about the OS yet, but it is what it is... That said, as it's a clean computer with nothing yet customized, I figure it's the perfect time for encryption. I plan on using this laptop partially for business, but mostly for play, as I have several other computers for strictly business purposes. Due to the nature of my business, there may at times be sensitive information accessed or temporarily stored on the device, so FULL DISK encryption is a must!

 

Does anyone have any suggestions or recommendations as to what my best bet is? I read that TrueCrypt wouldn't work well on 8.1, but it makes no real difference since TrueCrypt is on hiatus at the moment.

 

I'd be forever grateful for any info the help me get this set up so I can start using my new laptop. Thanks in advance.

 

- Vio



BC AdBot (Login to Remove)

 


#2 Anshad Edavana

Anshad Edavana

  • BC Advisor
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:07:12 PM

Posted 11 June 2014 - 05:37 AM

Hi

 

I would recommend "Bitlocker" as it is an in house tool and works best with "Windows". You need "Windows 8/8.1 Pro" to use "Bitlocker". If your current edition is "Single Language", you can buy an upgrade licence.

 

If you don't want to upgrade Windows, i would recommend "Diskcryptor".

 

https://diskcryptor.net/wiki/Main_Page

 

http://www.facepunch.com/threads/showthread.php?t=958183


Edited by Anshad Edavana, 11 June 2014 - 05:44 AM.


#3 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:42 AM

Posted 11 June 2014 - 05:46 AM

1.  Look at:

http://truecrypt.ch/

2.  Supposedly, on the above, a group if people are trying to keep truecrypt going, after the original person/group has stopped supporting it.

3.  I've used truecrypt on Windows 8.1U just fine (containers, not full disk encryption).

4.  I looked these up yesterday, but have yet to test them:

http://www.aescrypt.com/download/ (file-by-file)
http://www.axantum.com/AxCrypt/ (file-by-file)
https://diskcryptor.net/wiki/Main_Page
http://sourceforge.net/projects/freeotfe.mirror/

Best of luck.
 



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:42 AM

Posted 11 June 2014 - 05:57 AM

You may want to read this discussion topic.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 06:00 AM

Hi

 

I would recommend "Bitlocker" as it is an in house tool and works best with "Windows". You need "Windows 8/8.1 Pro" to use "Bitlocker". If your current edition is "Single Language", you can buy an upgrade licence.

 

If you don't want to upgrade Windows, i would recommend "Diskcryptor".

 

https://diskcryptor.net/wiki/Main_Page

 

http://www.facepunch.com/threads/showthread.php?t=958183

 

Thanks, Anshad Edavana.

 

Unfortunately, I have the Single Language 8.1. If I can save the money but still get a secure encryption, DiskCryptor seems to be the way to go.

 

I've downloaded the program, and after reading the details of the facepunch link you included, I'm curious to know if I must make an Image Disk Backup before proceeding to encrypt my disk? As I mentioned before, there is nothing yet installed or customized on that specific computer, and it is under full warranty for the next 2 years. 

 

Also, do you know if DiskCryptor will work with an external cloud based hard drive?

 

Thanks again for your recommendations.

 

-Vio



#6 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 06:08 AM

1.  Look at:

http://truecrypt.ch/

2.  Supposedly, on the above, a group if people are trying to keep truecrypt going, after the original person/group has stopped supporting it.

3.  I've used truecrypt on Windows 8.1U just fine (containers, not full disk encryption).

4.  I looked these up yesterday, but have yet to test them:

http://www.aescrypt.com/download/ (file-by-file)
http://www.axantum.com/AxCrypt/ (file-by-file)
https://diskcryptor.net/wiki/Main_Page
http://sourceforge.net/projects/freeotfe.mirror/

Best of luck.
 

 

Thanks, Scotty.

 

I did read quite a bit about the situation with TrueCrypt. Due to the current questions floating around about it, I'm leaning toward Diskcryptor at the moment; also because of the Full Disk option.

 

I'm curious, would there be any point to have a virtual disk if I've also got full disk encryption? I don't remember reading anything about that as of yet.

 

-Vio



#7 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 06:20 AM

You may want to read this discussion topic.

Thanks, quietman7.

 

I just scanned through that thread as well as the primary discussion by frankp316 you mentioned over there. I came across some pretty good links earlier this morning with some additional updates. I'll see if I can locate the site and post it on that thread. Thanks for the link.

 

- Vio


Edited by VioD, 11 June 2014 - 06:29 AM.


#8 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 06:59 AM

 I'll see if I can locate the site and post it on that thread. Thanks for the link.

 

- Vio

 

 

Posted a few of those links HERE.



#9 Kilroy

Kilroy

  • BC Advisor
  • 3,321 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:08:42 AM

Posted 11 June 2014 - 08:05 AM

Just a few thoughts on encryption.

 

If you are going to encrypt your data then backups are a must.  Encypting your backups is another decision you need to think about.  I've seen small disk errors make an entire drive lost

 

Encryption makes any type of drive recovery much more difficult, if not impossible.  Tools that you would use to work on the drive outside of the OS cannot be used as the drive looks like random 1s and 0s.

 

Forgetting your password, or in the case of your demise, prevents anyone from accessing the data.  (NSA possibly excepted)

 

Using any encryption software assumes that the people that created the software didn't make any mistakes and didn't put any back doors in to allow access without your password.



#10 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:42 AM

Posted 11 June 2014 - 08:23 AM

 

1.  Look at:

http://truecrypt.ch/

2.  Supposedly, on the above, a group if people are trying to keep truecrypt going, after the original person/group has stopped supporting it.

3.  I've used truecrypt on Windows 8.1U just fine (containers, not full disk encryption).

4.  I looked these up yesterday, but have yet to test them:

http://www.aescrypt.com/download/ (file-by-file)
http://www.axantum.com/AxCrypt/ (file-by-file)
https://diskcryptor.net/wiki/Main_Page
http://sourceforge.net/projects/freeotfe.mirror/

Best of luck.
 

 

Thanks, Scotty.

 

I did read quite a bit about the situation with TrueCrypt. Due to the current questions floating around about it, I'm leaning toward Diskcryptor at the moment; also because of the Full Disk option.

 

I'm curious, would there be any point to have a virtual disk if I've also got full disk encryption? I don't remember reading anything about that as of yet.

 

-Vio

 

 

 

I don't want to mislead you, so I can't answer the question with 100% assurance.  All my really critical stuff (e.g. bank account info, etc) is secured on a flash drive, that uses truecypt container (virtual drive), and it is locked in a fireproof lockbox.

We live in a rural community, with our closet neighbor maybe 1/4 mile away and our yard is fenced in.  Since my wife and I both work from home, our place is very seldom, "unmanned", except for the monthly trips to get food, pay bills, etc.  So the chances of someone getting in and getting the lockbox is very slim, especially where it is hidden.

After glancing through the link provided by "VioD" in:

http://www.bleepingcomputer.com/forums/t/535875/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/page-2#entry3392012

I'm going to have to do research "iSEC Partners" and see what their reputation is, until I accept their findings as POSSIBLE fact.  But, presuming that they check out, I'll be using another program other than Truecrypt.

When I worked for Boeing, they required full disk encryption.  I think I recall the name, but it cost $$.  If I recall correctly, it is called SafeGuard.  My research found Sophos, but if that is the same one Boeing used, I don't know.

Best of luck.



#11 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 05:11 PM

 

 

1.  Look at:

http://truecrypt.ch/

2.  Supposedly, on the above, a group if people are trying to keep truecrypt going, after the original person/group has stopped supporting it.

3.  I've used truecrypt on Windows 8.1U just fine (containers, not full disk encryption).

4.  I looked these up yesterday, but have yet to test them:

http://www.aescrypt.com/download/ (file-by-file)
http://www.axantum.com/AxCrypt/ (file-by-file)
https://diskcryptor.net/wiki/Main_Page
http://sourceforge.net/projects/freeotfe.mirror/

Best of luck.
 

 

Thanks, Scotty.

 

I did read quite a bit about the situation with TrueCrypt. Due to the current questions floating around about it, I'm leaning toward Diskcryptor at the moment; also because of the Full Disk option.

 

I'm curious, would there be any point to have a virtual disk if I've also got full disk encryption? I don't remember reading anything about that as of yet.

 

-Vio

 

 

 

I don't want to mislead you, so I can't answer the question with 100% assurance.  All my really critical stuff (e.g. bank account info, etc) is secured on a flash drive, that uses truecypt container (virtual drive), and it is locked in a fireproof lockbox.

We live in a rural community, with our closet neighbor maybe 1/4 mile away and our yard is fenced in.  Since my wife and I both work from home, our place is very seldom, "unmanned", except for the monthly trips to get food, pay bills, etc.  So the chances of someone getting in and getting the lockbox is very slim, especially where it is hidden.

After glancing through the link provided by "VioD" in:

http://www.bleepingcomputer.com/forums/t/535875/truecrypt-is-not-secure-official-sourceforge-page-abruptly-warns/page-2#entry3392012

I'm going to have to do research "iSEC Partners" and see what their reputation is, until I accept their findings as POSSIBLE fact.  But, presuming that they check out, I'll be using another program other than Truecrypt.

When I worked for Boeing, they required full disk encryption.  I think I recall the name, but it cost $$.  If I recall correctly, it is called SafeGuard.  My research found Sophos, but if that is the same one Boeing used, I don't know.

Best of luck.

 

 

After I posted those links you mentioned, I did a little more research and wrote a brief article with additional links to updated TrueCrypt info. The article is posted HERE.

 

The financial company I represent recommends TrueCrypt, and has yet to release any update to change that. In addition, they recommend BitLocker, Symantec's PGP, and McAfee; TrueCrypt being the only free software, of course... 



#12 VioD

VioD
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:06:42 AM

Posted 11 June 2014 - 05:15 PM

Just a few thoughts on encryption.

 

If you are going to encrypt your data then backups are a must.  Encypting your backups is another decision you need to think about.  I've seen small disk errors make an entire drive lost

 

Encryption makes any type of drive recovery much more difficult, if not impossible.  Tools that you would use to work on the drive outside of the OS cannot be used as the drive looks like random 1s and 0s.

 

Forgetting your password, or in the case of your demise, prevents anyone from accessing the data.  (NSA possibly excepted)

 

Using any encryption software assumes that the people that created the software didn't make any mistakes and didn't put any back doors in to allow access without your password.

 

Kilroy,

 

I currently have an external hard drive that is connected to my business router which I backup all of my 9 devices to regularly. I also have a backup external hard drive for that one that is in a lockbox. Do you know of a way to safely commingle this type of cloud based backup and encryption, or am I reaching?



#13 Kilroy

Kilroy

  • BC Advisor
  • 3,321 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:08:42 AM

Posted 12 June 2014 - 08:02 AM

Take a listen or read the transcripts of these three Security Now! podcast episodes.

 

Cloud Solutions

 

Q&A 142 / Cloud Security

 

Three Hybrid Cloud Solutions

 

I know Steve Gibson is planning an update to cloud storage solutions, but don't know when it will be broadcast.



#14 sarahvixxxx

sarahvixxxx

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:42 AM

Posted 25 June 2014 - 11:30 AM

You could also try skycrypt.  

have been using it and it seems to work well.

I got the free trial from their website. Does anyone else have experience with this??



#15 wpgwpg

wpgwpg

  • Members
  • 1,149 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US of A
  • Local time:09:42 AM

Posted 25 June 2014 - 12:11 PM

 You said "The financial company I represent recommends TrueCrypt, and has yet to release any update to change that. In addition, they recommend BitLocker, Symantec's PGP, and McAfee; TrueCrypt being the only free software, of course... "

Bitlocker is included in Windows 8/8.1 Pro and in the Enterprise and Ultimate versions of Windows 7, so why do you say it's not free?  I don't use encryption, so I have to say up front I'm no expert on the subject, but MS seems to be very proud of it.  FWIW, maybe not much!  :whistle:

 

Good luck.


Edited by wpgwpg, 25 June 2014 - 12:11 PM.

Everyone with a computer should back his system up to an external hard drive regularly.  :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users