Posted: 7/31/2007 7:42:13 PM EDT
| I have a 4 GB flash drive that I would like to password protect so that nobody else could access. I want it to work in any computer with out any software on the computer end. And if possible have it delete/reformat/zero the contents of the drive on "x" number of unsuccessful login attempts. I know that there are plenty of flash drive encryption programs available via Google, but I would rather not download a virus. |
|
For all practical purposes, you can simply install TrueCrypt on your computer, create a large encrypted partition file on the flash drive (say, 995 megs on a 1 gig drive), and as part of the install process have TrueCrypt install itself on the disk for what it calls traveller mode. This way, the entire encryption software package is on the disk with you. You can also encrypt the whole device, but then you have to have TrueCrypt installed on every computer you use, or you have to have a seperate USB key or disk with the TrueCrypt traveller software on it. |
|
I agree 100% with KS_Physicist. TrueCrypt is the way to go and should be mandatory for all sensitive info on a flash drive. I have it set up on my flash drive so that when I insert it into a PC it will automatically prompt me for the encrypted volume's password. It will do this on any PC that has autorun enabled. If not just run it directly from the flash drive using the traveller mode that was mentioned. However, anytime TrueCrypt is mentioned it should be noted that you must have administrative rights on any PC you intend use it on. Admin rights are required to mount the encrypted volume. If you don't have it you won't be getting to your data. This typically isn't a problem for your PCs and most home PCs that are already signed into but you could run into issues in a corporate environment. |
| Ok I like the looks of TrueCrypt, execpt for the part about having admin rights. As this will be used on a home computer, and .gov computers. If I understand correctly I will not be able to use any encrypted volume regardless of type of software used unless I have admin rights so that is not a fault of TrueCrypt. I guess I can make a small partition with the most critical info protected and have my work stuff on the other partition. |
|
You can actually mount Truecrypt volumes, create new file-based volumes, and manipulate files on those volumes without admin privileges once an administrator has installed Truecrypt on the system. Running Truecrypt in traveller mode does require admin rights because it installs a device driver to do its magic. There are other things in Truecrypt, like encrypted partition stuff, which require admin rights, but I can't remember them all. Alpine |
Yeah...the point I am making is that I always let people know this ahead of time. You can get really comfortable using encryption in this manner. Then you go somewhere thinking you can get to your data and surprise that isn't the case. I often use PCs where it isn't feasible to get an admin to set me up. In those cases I need to understand that my sensitive data won't be accessible. |
While U3 may work for some people it wouldn't work with how I use my data. TrueCrypt will create a new encrypted volume...let's say a X: drive. Now everything I place in that X drive is encrypted for me on the fly. TrueCrypt will also work with Linux which another requirement I have. Correct me if I am wrong but I also don't think U3 will work in the following scenario. Since I may use email from my flash drive I place my whole Thunderbird mailbox in the encrypted volume. So this way if I lose my flash drive you can't just open my plaintext mbox files. In order to fire up my email from my flash drive you MUST mount the encrypted volume. I may also put my IM client in the encrypted volume. This way no one can see my login names and buddy lists. The whole reason I have it set up this way is because if I lose my drive I don't have any identifying characteristics to be read by the person that may find it. ETA: You should visit the TrueCrypt site. These guys are security nuts. Everything about plausible denial, two layers of passwords/volumes, and adversaries beating you for your encryption passphrase is addressed. Like I said they are crazy about this stuff. While we may not need it for those situations it is easy enough to use and gives you the comfort knowing your data is safe. |
|
Since I use my drives on multiple platforms, linux, windows, mac, solaris. I can't really use filesystem based encryption options. But what I do is 95% of my drive contents are unencrypted because most of it doesn't need to be. The 5% that I would consider confidential information, I encrypt those files individually with gpg. This is a more portable option for me, it may not work for you. You could also keep the gpg binaries for whatever os on the drive. I have a Apps directory, with Win32, Mac, Linux directories in it. I then keep binaries for various portable apps and such in those, putty(win32 only), gpg, portablefirefox, rar. |
|
is true crypt vista compatible yet? are there any known issues with vista keeping your password in some place, specifically because it's a true crypt issue (ie, for .gov requirements) thanks also, to the OP do a google, there are acutal usb cards you can buy that are encrypted, and after 5 attempts to apply password, the only way to get the info is none. You have to wipe the drive to use again. TXL |
IronKey |
Absolute tits. Their 4GB model is sold out and on backorder. |
Does their implementation of tor on Firefox work as advertised? I like tor, but it can be slow. |