Beat Obama’s Bandits With TrueCrypt Free (Open-Source) Encryption

The so called “War on Terror” has long since lost its luster and should be appropriately reclassified as The War of Terror. The U.S. has been singularly impudent in terrorizing the terrorists but instead, it has managed to terrorize the rest of the world using a system of surveillance schemes that have gone off the board. Chalk one up for Al Qaeda – the only winners in this debacle.

In the meantime, Americans continue to live in fear – trading away freedoms for security in a war that is simple unwinnable. Obama, despite his assurances that he would “fight terrorism while maintaining our civil liberties” has been a principle mover in this assault on democracy.

And, the master of the reversal has more –

Obama, in a 2008 election sound bite, drew a sharp contrast with the Bush administration which he proclaimed, offered Americans “a false choice between the liberties we cherish and the security we demand.” And for good measure – for stooping “to spy on citizens who are not suspected of a crime.” It’s a surreal world we live in, is it not?

But why be satisfied with my ramblings? Here’s the video.

As America continues its slide into Fascism (eagerly joined in the venture by Canada, Australia, the U.K. and countless other self-advertised “democracies”), the justified expectation held by these governments is – you – yes, you – will take no active part in expressing your outrage at the escalating intrusions into your private life. Sadly, the undermining of democracy, or more to the point, democracy as we though we knew it, continues apace.

As a consequence (hardly the only consequence, of course), encryption technology is once again in the spotlight. And no, using encryption does not mean that one has something to hide.

Sophisticated and  aware computer users know, that financial data and other confidential information, can easily be subject to intrusive viewing by those not authorized to do so.

Putting Obama and his bad boys aside, here are some examples of how this might occur:

Internet malware attack: Increasingly, statistics reinforce the fact that financial data continues to be targeted by hackers/information thieves, for the purpose of identity theft.

Contrast that reality with these facts; there is no such thing as a totally secure Internet connected computer. All Internet connected computers are subject to attack and compromise.

Lost or stolen Laptop: How often have we read the following – 200,00 (insert your own number here), bank account numbers, Social Insurance Numbers, names, addresses and dates of birth were on a laptop stolen/lost earlier this week.

In too many of these cases, negligently, the data is unencrypted. Certainly Laptop theft or loss is not restricted to organizations; it can just as easily happen to you.

Lost or stolen USB drive: Since USB flash drives are so portable, you can take a drive virtually anywhere. Just like most items that are portable and that you carry with you, this type of drive can be lost, or stolen.

To reduce or eliminate the security threat of sensitive data exposure then, the most prudent course of action is data encryption. Essentially, data encryption is a secure process for keeping your sensitive and confidential information private. It’s a process by which bits of data are mathematically jumbled with a password-key. The Encryption process makes the data unreadable unless, or until, decrypted.

It happens to us all: Just this past week, I lost not only my house keys (first time ever) – but the USB key attached to the keychain. If you guessed that the drive was encrypted – take a bow.  

TrueCrypt:

TrueCrypt is an outstanding free open source software application for establishing and maintaining an on-the-fly-encrypted volume. On-the-fly encryption simply means that data are automatically encrypted, or decrypted, just before they are loaded or saved – without any user intervention. The program automatically and transparently encrypts in real time.

No data stored on an encrypted volume can be read (decrypted) without the correct password/key file or correct encryption keys. The entire file system is encrypted (i.e., file names, folder names, contents, free space, Meta data, etc.).

Files can be copied to and from a mounted TrueCrypt volume just like they are copied to/from any normal disk (for example, by simple drag-and-drop operations). When you turn off your computer, the volume will be dismounted and files stored in the volume will be inaccessible and encrypted. You may of course, manually dismount the volume.

TrueCrypt offers a number of options – you can store your encrypted data in files, partitions, or on a portable storage device such as a USB flash drive.

Installation is simple and straightforward – no gotchas here. Lots of steps – but easy steps.

If you choose “Keyfiles”, be sure you understand the ramifications. This is an extra security step which has limited application for a home user. You do not need to select this option.

And – Win 8’s File Explorer reports that the volume has been setup successfully. If you expand the graphic below (click), you’ll also notice my first TrueCrypt volume on this HD from May 9, 2006.

Indicative of this application’s popularity is the fact that it is downloaded tens of thousands of times each day, across the Internet.

Fast Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified (volumes cannot be distinguished from random data)

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

Pipelined operations increasing read/write speed by up to 100% (Windows)

I’ve been using TrueCrypt for a number of years, and I have developed a lot of confidence in this outstanding application. If you determine that encryption of your sensitive data is a priority, I highly recommend that you give TrueCrypt a try.

How effective is TrueCrypt? If you have any doubts as to how effective TrueCrypt really is, then read this article. FBI hackers fail to crack TrueCrypt:

The FBI has admitted defeat in attempts to break the open source encryption used to secure hard drives seized by Brazilian police during a 2008 investigation.

System Requirements: Win 8, Win 7, Vista, XP, Mac OS X, and Linux.

Download at: TrueCrypt

TrueCrypt – Free Encryption To The Max

Sophisticated and  aware computer users know, that financial data and other confidential information, can easily be subject to intrusive viewing by those not authorized to do so.

Some examples of how this might occur:

Internet malware attack: Increasingly, statistics reinforce the fact that financial data continues to be targeted by hackers/information thieves, for the purpose of identity theft.

Contrast that reality with these facts; there is no such thing as a totally secure Internet connected computer. All Internet connected computers are subject to attack and compromise.

Lost or stolen Laptop: How often have we read the following – 200,00 (insert your own number here), bank account numbers, Social Insurance Numbers, names, addresses and dates of birth were on a laptop stolen/lost earlier this week.

In too many of these cases, negligently, the data is unencrypted. Certainly Laptop theft or loss is not restricted to organizations; it can just as easily happen to you.

Lost or stolen USB drive: Since USB flash drives are so portable, you can take a drive virtually anywhere. Just like most items that are portable and that you carry with you, this type of drive can be lost, or stolen.

To reduce or eliminate the security threat of sensitive data exposure then, the most prudent course of action is data encryption. Essentially, data encryption is a secure process for keeping your sensitive and confidential information private. It’s a process by which bits of data are mathematically jumbled with a password-key. The Encryption process makes the data unreadable unless, or until, decrypted.

TrueCrypt is an outstanding free open source software application (one I have been using for years), for establishing and maintaining an on-the-fly-encrypted volumes.

On-the-fly encryption simply means that data are automatically encrypted, or decrypted, just before they are loaded or saved, without any user intervention.

TrueCrypt uses 11 algorithms for encrypting private files in a password-protected volume. You can store your encrypted data in files, partitions, or on a portable storage device such as a USB flash drive.

Once your encrypted files are mounted to a local drive with your password or key, you can manipulate those files, i.e. you can open, copy, delete, or modify them. When you have completed working on those files, you then dismount the volume and the files are then safely secured from unauthorized access.

Indicative of this application’s popularity is the fact that it is downloaded tens of thousands of times each day, across the Internet.

Fast Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified (volumes cannot be distinguished from random data)

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

Pipelined operations increasing read/write speed by up to 100% (Windows)

Mac OS X version

Graphical user interface for the Linux version of TrueCrypt

XTS mode of operation – XTS is faster and more secure than LRW

As I said, I have been using TrueCrypt for a number of years, and I have developed a lot of confidence in this outstanding application. If you determine that encryption of your sensitive data is a priority, I highly recommend that you give TrueCrypt a try.

How effective is TrueCrypt? If you have any doubts as to how effective TrueCrypt really is, then read this article. FBI hackers fail to crack TrueCrypt:

The FBI has admitted defeat in attempts to break the open source encryption used to secure hard drives seized by Brazilian police during a 2008 investigation.

System Requirements: Windows 7/Vista/XP (64 bit), Mac OS X, and Linux

Download at: TrueCrypt

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Hard Drive Kidnapping – GpCode Ransomware On The Attack Again!

When we think of kidnapping, extortion, or blackmail, I think it’s safe to say, not many of us would consider our computer files being a likely victim. That is, unless we were familiar with a particular form of malware known as Ransomware.

Ransomware is a particular vicious form of malware – malware that encrypts the victim’s files, and then demands a monetary ransom to decrypt those kidnapped files.

Once again the Ransomware Trojan Gpcode, first encountered some years back by Kaspersky Lab, is on the loose. This is the fourth release of GpCode that we’ve covered here in the last few years, and as expected, this version continues to use RSA-1024 and AES-256 encryption.

As opposed to past variants though, this time around GpCode doesn’t delete files after encryption. Instead, to make it more difficult for a victim to recover from the attack – files are overwritten.

Once GpCode has finished its nasty work, the victim is presented with the following Desktop message.

Followed by a ransom note via Notepad, which is launched automatically by GpCode. The ransom note demands payment of a $120 fee.

Preliminary indications are; the attack vector is a malicious PDF which when opened, downloads and installs, the ransomware.

Vitaly Kamluk over at Kaspersky Lab’s Securelist site, offers the following advice – “If you think you are infected, we recommend that you do not change anything on your system as it may prevent potential data recovery if we find a solution.

It is safe to shutdown the computer or restart it despite claims by the malware writer that files are deleted after N days – we haven’t seen any evidence of time-based file deleting mechanism. But nevertheless, it is better to stay away from any changes that could be made to the file system which, for example, may be caused by computer restart”.

Reduce the possibilities of infection by this and other malware, by taking the following precautions:

Don’t open unknown email attachments

Don’t run programs of unknown origin

Disable hidden filename extensions

Keep all applications (including your operating system) patched

Turn off your computer or disconnect from the network when not in use

Disable Java, JavaScript, and ActiveX if possible

Disable scripting features in email programs

Make regular backups of critical data. If you are infected this may be your only solution

Make a boot disk in case your computer is damaged or compromised

Turn off file and printer sharing on the computer

Install a personal firewall on the computer

Install anti-virus/anti-spyware software and ensure it is configured to automatically update when you are connected to the Internet

Ensure your anti-virus software scans all e-mail attachments

Don’t store critical data on the system partition

Let me reemphasize – Make regular backups of critical data. If you become infected, this may be your only recovery option.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Free FilerFrog – A Powerful Windows Explorer Context Menu Extension

If you’re a power user, then you know that by utilizing the “right click context menu” in Windows Explorer, you can obtain a real productivity boost. So, if you’re looking for a context menu extender that will increase your productivity when you’re working with files and folders, then take a look at FilerFrog.

FilerFrog (last updated November 8, 2010), is an open source Windows Explorer context menu extension, that adds a bag full of additional context menu support  in the following categories – image resizing, file renaming, encryption, listing, path copying, and a whole lot more.

Following installation ( a restart is required), you will see the new “FilerFrog”, command in Windows Explorer context menu (right click menu), as the following screen capture illustrates.

Click on to graphic to expand to original size. (1100×776)

I’m a big fan of Explorer context menu extensions, so you might see some menu extenders in this screen shot that you’re not familiar with.

If the right click context menu is a tool you use frequently, installing FilerFrog should help boost to your productivity when you’re working with files and folders.

System Requirements: Windows XP, Vista, Win 7.

Downloads: Be sure you choose the right installer.

32 bit.

64 bit.

If the right click context menu is a tool you use frequently, installing FilerFrog should help give a boost to your productivity.

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Download Free Encrypt Stick 4.3 – A Digital Privacy Manager

When talking about encryption applications, my good buddy Glenn Taggart likes to say, “My primary use is encrypting my personal information in the event prying eyes happen upon my stuff.”

I can’t argue with that. Financial data and other privileged information on a computer can easily be subject to intrusive viewing by those not authorized to do so.

Of course, it’s not only those with physical access that can probe a computer for sensitive and confidential information. Internet malware attack statistics show, more and more, that this type of information is targeted by hackers/information thieves, for the purpose of identity theft.

Can it happen to you? The short answer is – you can count on an attempt. The reality is; there is no such thing as a totally secured internet connected computer. All internet connected computers are subject to attack.

As well, many of us have additional files that we may consider sensitive and confidential. Files that we don’t want a spouse, girlfriend, a child, or others, to have ready access to.

To reduce or eliminate the security threat to your sensitive data, the most prudent course for you to follow is to encrypt your data. Data encryption makes the data unreadable unless, or until, decrypted by you.

I’ve just finished testing the recently released Encrypt Stick digital privacy application, which is available in both a free version and a commercial version, and I have to say, I’m very impressed.

Encrypt Stick runs directly (and only), from a USB drive which guarantees that no foot print is left on your machine.

On launching the application, which must be launched from the flash drive to which it was downloaded (or in my case copied), the following screen appears. The process of encryption is very straightforward from there, as the screen captures below indicate.

After activation (in this case the free version), you will be prompted for a password.

The first time you run Encrypt Stick digital privacy software, you’ll be presented with a quick tutorial which explains the basic steps so that you can get up and running quickly. A very cool idea!

Please be aware that you must enter your password before you can gain access to the application.

Double clicking on the new vault (First Vault), which I’ve created on my D drive, allows access to all of the application’s functions.

In this case, I encrypted a test file (application) – TaskBar Repair Tool. You’ll notice I have the option of removing this file (the unencrypted version), from my D drive or, leaving it on the drive as is.

The end result is, the test file is now safely encrypted and stored in “First Vault”. To ensure the file was stable, I then launched the application directly from inside the vault.

Here’s how the developer describes Encrypt Stick:

Encrypt Stick digital privacy software turns any Flash Drive into a personal Digital Privacy Manager (DPM). The DPM is the key that locks down privacy for your sensitive digital files.

It’s a complete file security system for all your desktops, laptops, storage devices and portable USB devices. Most utilities can do only part of the job. Encrypt Stick software does it all, quicker and easier — without expensive hardware.

This application is very substantial, and includes a vast number of features. However, the free version is limited to 20 MB of storage. Still, an average user should find this limitation acceptable.

Fast Facts – Free version:

Free Downloadable Updates

No Administrator Access Necessary to setup or run Encrypt Stick

Setup and running in under 5 minutes!

Easy to use – no learning curve

Compatible with Windows 2000/XP/Vista/Win7

Compatible with Mac OS 10.4+

Encrypt Stick runs from your flash drive – not your computer

Uses 512bit Polymorphic Encryption

Encryption Algorithm is unique to each Flash Drive

High speed encryption

Protects any type of digital file

Encrypted Vault’s are hidden from other users

Encrypted Flash Drive Storage Space 20mb

Store Encrypted Vaults on any computer

Store Encrypted Vaults on Network Servers

Protects Files and folders on any type of storage device

Unlimited Folders – Create folders within Vaults to organize your files

Automatic Timeout Feature – Never leave your files exposed   5 minutes

Encrypted Virtual Keyboard – Eliminate Key Stroke Logging

And lots more

System requirements: Mac OSX 10.4+, Windows XP, Vista, Win 7.

Download at: the developer’s site (ENC).

As an added bonus, Encrypt Stick includes both a password manager, and a virtual keyboard. Testing of both these additional features was outside the scope of this review, however.

To get a feel for just how easy this application is to run, checkout – Walkthroughs – Encrypting Files To Your Flash Drive, on the developer’s site.

The following are additional free encryption applications we’ve previously reviewed here:

TrueCrypt

AxCrypt

EncryptOnClick

Secret Disk

USB Safeguard

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Download TrueCrypt – TrueCrypt Beats The FBI Decryption Team!

When the subject of file/disk encryption comes up, when talking with my non-technical friends, I often get the oddest looks and the strangest comments. These comments generally revolve around the fact (my friends’ facts), that only someone with something to hide would need to encrypt files.

They’re right of course, but not for the reasons they set forth.

In the real world, aware computer users know that financial data, and other confidential information, can easily be subject to intrusive viewing by those not authorized to do so.

Some examples of how this might occur:

Internet malware attack: Increasingly, statistics reinforce the fact that financial data continues to be targeted by hackers/information thieves, for the purpose of identity theft.

Contrast that reality with these facts; there is no such thing as a totally secure Internet connected computer. All Internet connected computers are subject to attack and compromise.

Lost or stolen Laptop: How often have we read the following – 200,00 (insert your own number here), bank account numbers, Social Insurance Numbers, names, addresses and dates of birth were on a laptop stolen/lost earlier this week.

In too many of these cases, negligently, the data is unencrypted. Certainly Laptop theft or loss is not restricted to organizations; it can just as easily happen to you.

Lost or stolen USB drive: Since USB flash drives are so portable, you can take a drive virtually anywhere. Just like most items that are portable and that you carry with you, this type of drive can be lost (I’ve personally lost two), or stolen.

To reduce or eliminate the security threat of sensitive data exposure then, the most prudent course of action is data encryption. Essentially, data encryption is a secure process for keeping your sensitive and confidential information private. It’s a process by which bits of data are mathematically jumbled with a password-key. The Encryption process makes the data unreadable unless, or until, decrypted.

TrueCrypt is an outstanding free open source software application (one I have using for the last several years), for establishing and maintaining an on-the-fly-encrypted volumes.

On-the-fly encryption simply means that data are automatically encrypted, or decrypted, just before they are loaded or saved, without any user intervention.

TrueCrypt uses 11 algorithms for encrypting private files in a password-protected volume. You can store your encrypted data in files, partitions, or in this latest release (November 23, 2009), a portable storage device such as a USB flash drive.

Once your encrypted files are mounted to a local drive with your password or key, you can manipulate those files, i.e. you can open, copy, delete, or modify them. When you have completed working on those files, you then dismount the volume and the files are then safely secured from unauthorized access.

Indicative of this application’s popularity is the fact that it is downloaded tens of thousands of times each day, across the Internet.

Fast Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified (volumes cannot be distinguished from random data)

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

Pipelined operations increasing read/write speed by up to 100% (Windows)

Mac OS X version

Graphical user interface for the Linux version of TrueCrypt

XTS mode of operation – XTS is faster and more secure than LRW

As I said earlier, I have been using TrueCrypt for a number of years, and I have developed a lot of confidence in this outstanding application. If you determine that encryption of your sensitive data is a priority, I highly recommend that you give TrueCrypt a try.

How effective is TrueCrypt? If you have any doubts as to how effective TrueCrypt really is, then read this article. FBI hackers fail to crack TrueCrypt:

The FBI has admitted defeat in attempts to break the open source encryption used to secure hard drives seized by Brazilian police during a 2008 investigation.

System Requirements: Windows 7/Vista/XP (64 bit), Mac OS X, and Linux

Download at: TrueCrypt

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Download Free USB Safeguard – Simple USB Data Encryption

Since USB drives are so portable, you can take a drive virtually anywhere. Just like most items that are portable and that you carry with you, this type of drive can be lost (I’ve personally lost two – both encrypted), or stolen.

If you should lose a USB drive, through happenstance or theft, you need to be sure that any confidential information on the drive cannot be read, and the way to do that is to encrypt your data.

If you’re unfamiliar with data encryption; simply put, it is a process by which bits of data are mathematically jumbled with a password-key. The process makes the data unreadable unless, or until, decrypted by you.

Here’s a very cool free encryption application, USB Safeguard, which will encrypt your USB data in an easy, follow the bouncing ball manner – you can’t get much easier than “Drag and Drop”. Simply download this free application and run it from your USB drive.

The following screen captures illustrate just how easy encryption can be using USB Safeguard. Clicking on any graphic will open a new window to display the graphic in 640x – format.

Launch the application on your USB drive and construct a password.

You will be queried as to whether you want to save your password on your Home PC.

Drag and Drop the files on the USB Drive you want to encrypt into the applications interface window. The free application restricts encryption to a maximum of 2 GB.

Following successful encryption you will have the option of further protecting your files (in the event of loss), by overwriting or deleting the encrypted files. I particularly like this feature, since it adds another layer of security.

Decrypting the files is every bit as easy. Simply launch the application (remember, the application is on the USB drive), enter you’re password and voila!

Fast facts:

Runs with any usb pen drive

No installation required

256-bit AES encryption

Easy drag & drop file adding

Built in file shredder

Secure your data if drive is lost

Supports FAT16, FAT32 and NTFS file system

Without a doubt, this is encryption taken to a new level of simplicity. Ideal for average users, who have little interest in dealing with the finer points of encrypting data.

System requirements: Windows XP/Vista/Seven

Download at: Developer’s Site (USB Safeguard Software)

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Two Free Apps to Encrypt Your USB Drive

You can call it a Flash Drive, a USB Key, a USB drive, a Keychain drive, or a USB stick. Whatever you call it, you are referring to a small plastic case which contains a circuit board and a USB connector.

Instead of the now obsolete floppy disk (new machines generally don’t have a floppy drive), USB flash drives have become the standard for transporting applications, personal files, documents, pictures, videos, music and so on.

Since USB drives are so portable, you can take a drive virtually anywhere. Just like most items that are portable and that you carry with you, this type of drive can be lost (I’ve personally lost two), or stolen.

If you should lose a USB drive, through happenstance or theft, you need to be sure that any confidential information on the drive cannot be read, and the way to do that is to encrypt your data.

Here are a number of free encryption applications that will encrypt your data, and are suitable for a USB flash drive.

EncryptOnClick

EncryptOnClick is a free program that lets you securely encrypt and decrypt files. The program is very simple to use, and features military grade 256-bit AES encryption.

After you have launched the application, simply select the target file/folder you want to encrypt.

Following the easy interface, type a password for that file/folder which will then be encrypted. To open the encrypted file/folder at a later date, you must type the correct password.

Fast facts:

A very secure encryption and decryption method is used (256-bit AES encryption)

Files are both compressed & encrypted, which results in a smaller file

Password protected

Will encrypt single files or all files in a folder

Very simple to use interface

Can be used on a USB key

Fully Unicode enabled so filenames in any language can be encrypted

Will encrypt, decrypt, compress, and uncompress files which can also be opened and decrypted using third party programs like WinZip 9 – provided the correct password is used

Will detect if you’re decrypting a file that is in a temporary folder, and if so, will prompt you to see if you would like to decrypt it into a different folder

Command line parameters can be used

Complete help file

Free technical support, online forums, knowledge base, and FAQs at 2BrightSparks

Tip: Use on a USB key by copying the files EncryptOnClick.exe, EncryptOnClick.exe manifest, ExceedZip.dll to a named folder on the USB key.

System Requirements: Windows 98/ME/2000/XP/2003/Vista (64 bit)

Download at: SnapFiles

TrueCrypt

TrueCrypt (updated November 23, 2009), is an outstanding free open source software system, (one I have using for the last several years) for establishing and maintaining an on-the-fly-encrypted volume.

On-the-fly encryption simply means that data are automatically encrypted or decrypted just before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/correct encryption keys.

TrueCrypt uses 11 algorithms for encrypting private files in a password-protected volume. You can store your encrypted data in files, partitions, or a portable storage device such as a USB flash drive.

Once your encrypted files are mounted to a local drive with your password or key, you can manipulate those files, i.e. you can open, copy, delete, or modify them. When you have completed working on those files, you then dismount the volume and the files are then safely secured from unauthorized access.

Fast Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified – volumes cannot be distinguished from random data

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

System Requirements: Windows 7/Vista/XP (64 bit), Mac OS X, and Linux

Download at: TrueCrypt

If you found this article useful, why not subscribe to this Blog via RSS, or email? It’s easy; just click on this link and you’ll never miss another Tech Thoughts article.

Three Free Apps to Encrypt, Decrypt Your Data

Financial data and other privileged information on a computer can easily be subject to intrusive viewing by those not authorized to do so.

Not many of us, it seems, bother to lock our computers while we’re temporarily away from the machine, creating a perfect opportunity for others to peek at our most sensitive and confidential files.

Quick tip: Press the Windows Key + L which, in Windows XP or Windows Vista, will lock your computer by displaying the Profile screen. When you click on your icon and type your password, you again have access to the PC.

Of course, it is not only those with physical access that can probe a computer for sensitive and confidential information. Internet malware attack statistics show, more and more, that this type of information is targeted by hackers/information thieves, for the purpose of identity theft.

Can it happen to you? The short answer is – you can count on an attempt. The reality is; there is no such thing as a totally secured internet connected computer. All internet connected computers are subject to attack.

To reduce or eliminate the security threat to your sensitive data, the most prudent course for you to follow is to encrypt your data. If you’re unfamiliar with data encryption; simply put, it is a process by which bits of data are mathematically jumbled with a password-key. The process makes the data unreadable unless, or until, decrypted by you.

The following are well tested, free encryption applications, that will encrypt your data and are suitable for a USB flash drive.

EncryptOnClick

EncryptOnClick is a free program that lets you securely encrypt and decrypt files. The program is very simple to use, and features military grade 256-bit AES encryption.

After you have launched the application, simply select the target file/folder you want to encrypt.

Following the easy interface, type a password for that file/folder which will then be encrypted. To open the encrypted file/folder at a later date, you must type the correct password.

Quick facts:

A very secure encryption and decryption method is used (256-bit AES encryption)

Files are both compressed & encrypted, which results in a smaller file

Password protected

Will encrypt single files or all files in a folder

Very simple to use interface

Can be used on a USB key

Fully Unicode enabled so filenames in any language can be encrypted

Will encrypt, decrypt, compress, and uncompress files which can also be opened and decrypted using third party programs like WinZip 9 – provided the correct password is used

Will detect if you’re decrypting a file that is in a temporary folder, and if so, will prompt you to see if you would like to decrypt it into a different folder

Command line parameters can be used

Complete help file

Free technical support, online forums, knowledge base, and FAQs at 2BrightSparks

Tip: Use on a USB key by copying the files EncryptOnClick.exe, EncryptOnClick.exe manifest, ExceedZip.dll to a named folder on the USB key.

System Requirements: Windows 98/ME/2000/XP

Download at: Download.com

TrueCrypt

TrueCrypt is an outstanding free open source software system, (one I have using for the last several years) for establishing and maintaining an on-the-fly-encrypted volume.

On-the-fly encryption simply means that data are automatically encrypted or decrypted just before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/correct encryption keys.

TrueCrypt uses 11 algorithms for encrypting private files in a password-protected volume. You can store your encrypted data in files, partitions, or a portable storage device such as a USB flash drive.

Once your encrypted files are mounted to a local drive with your password or key, you can manipulate those files, i.e. you can open, copy, delete, or modify them. When you have completed working on those files, you then dismount the volume and the files are then safely secured from unauthorized access.

Quick Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified – volumes cannot be distinguished from random data

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

System Requirements: Windows 2000/XP/2003/Vista

Download at: Download.com

My Lockbox

My Lockbox is a freeware software application that allows you to do just that, and then password protect those files on your computer.

Other users will not have access to these files, nor will they be able to accidentally, or otherwise, view them or manipulate them in any way.

The protected folder (lockbox) is hidden from all other users and applications on your computer; including the Administrator and the System. The lockbox (protected folder), is impossible to access not only from the local computer, but also from the Internet.

Following the on-screen instructions makes this program extremely easy to setup and use. The lockbox location, password, and parameters are configured during the easy setup procedure.

After the setup is completed, the lockbox will be hidden and locked until you, as the user, enter the valid password. My Lockbox Control Panel allows you easily change basic lockbox parameters: lockbox location, protection status, and password.

The program is effective, easy to use and best of all – it’s free.

Quick facts:

Very easy to use

Almost any folder on your computer can be password protected

Instant protection – no file scrambling

Lockbox folder is inaccessible even by the system administrators

Lockbox folder is inaccessible both locally and remotely

Lockbox folder can be protected in Windows safe mode

Hotkeys support – you can popup the Control Panel with a keystroke

Skinned user interface

Freeware

System Requirements: Windows 2000, XP, 2003 Server, Vista

Download at: Download.com

Encrypt Your USB Drive with Free Software

What is it they say about the shoemaker’s daughter – oh yes; she has no shoes!

What is it they say about the computer tech who consistently warns computer users to take particular care of USB drives to ensure they won’t be lost, or stolen? Well today they might say – he should be more careful and follow his own advice!

I have made a habit, these last several years, of carrying one or more USB drives with me no matter the activity I’m engaged in. So it wasn’t unusual that while skiing this past weekend, I had two flash drives with me. What was unusual though was – I lost both sticks on the slopes. Yes, skiing occasionally involves falling head over heels.

Other than the minor cost involved in replacement, and the drudgery of reinstalling my trusty ‘tech toolbox” no real harm occurred since both drives were encrypted. Nevertheless, the lesson learned here was – none of us are infallible.

Sure, I know, you’ll never lose your USB flash drive, and you take particular care to ensure it won’t be stolen. But does loss, or theft, of a USB stick happen? You bet. My recent experience is a perfect example. Just this past week, it was reported that in the U.K., 9,000 USB drives were found by dry cleaners in 2008.

The following are selected statistics, but they make the point that USB sticks, or other portable media devices, frequently get lost, or stolen.

– Privacyrights.org recently reported that in the last two years, personal information on over 244 million Americans has being stolen, or exposed in other ways.

– Recently in the U.K., an unencrypted Ministry of Defense USB drive was found on the floor of a nightclub. That’s not much of a story I suppose, but added to the other fifty eight Ministry of Defense unencrypted drives that were reported lost in 2008 which contained details of troop movements, locations, and travel accommodation, and it takes on a different perspective.

– In the U.S., The Transportation Security Agency (TSA) recently admitted the loss of an unencrypted external hard drive containing the personal, bank and payroll information of up to 100,000 of its former and current employees who worked for the agency from January 2002 until August 2005.

– Several months ago, unencrypted data on all 84,000 prisoners in England and Wales went missing after a contractor lost a USB stick on which it had been stored.

– According to Security Software Zone

“Government data loss and data leakages related to lost or stolen computer memory sticks, are now commonplace.”

In too many of these cases, negligently, the data is unencrypted. Certainly Laptop/ USB flash drive theft or loss is not restricted to organizations; we know that it can just as easily happen to you or me.

To reduce or eliminate the security threat to your sensitive data, the most prudent course for you to follow is to encrypt your data. If you’re unfamiliar with data encryption; simply put, it is a process by which bits of data are mathematically jumbled with a password-key. The process makes the data unreadable unless, or until, decrypted by you.

Microsoft revealed recently that Windows 7, its next operating system, will include a feature that will let users encrypt USB drives.

In the meantime, here are a number of free encryption applications that will encrypt your data and are suitable for a USB flash drive.

EncryptOnClick

EncryptOnClick is a free program that lets you securely encrypt and decrypt files. The program is very simple to use, and features military grade 256-bit AES encryption.

After you have launched the application, simply select the target file/folder you want to encrypt.

Following the easy interface, type a password for that file/folder which will then be encrypted. To open the encrypted file/folder at a later date, you must type the correct password.

Quick facts:

A very secure encryption and decryption method is used (256-bit AES encryption)

Files are both compressed & encrypted, which results in a smaller file

Password protected

Will encrypt single files or all files in a folder

Very simple to use interface

Can be used on a USB key

Fully Unicode enabled so filenames in any language can be encrypted

Will encrypt, decrypt, compress, and uncompress files which can also be opened and decrypted using third party programs like WinZip 9 – provided the correct password is used

Will detect if you’re decrypting a file that is in a temporary folder, and if so, will prompt you to see if you would like to decrypt it into a different folder

Command line parameters can be used

Complete help file

Free technical support, online forums, knowledge base, and FAQs at 2BrightSparks

Tip: Use on a USB key by copying the files EncryptOnClick.exe, EncryptOnClick.exe manifest, ExceedZip.dll to a named folder on the USB key.

System Requirements: Windows 98/ME/2000/XP

Download at: Download.com

TrueCrypt

TrueCrypt is an outstanding free open source software system, (one I have using for the last several years) for establishing and maintaining an on-the-fly-encrypted volume.

On-the-fly encryption simply means that data are automatically encrypted or decrypted just before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/correct encryption keys.

TrueCrypt uses 11 algorithms for encrypting private files in a password-protected volume. You can store your encrypted data in files, partitions, or a portable storage device such as a USB flash drive.

Once your encrypted files are mounted to a local drive with your password or key, you can manipulate those files, i.e. you can open, copy, delete, or modify them. When you have completed working on those files, you then dismount the volume and the files are then safely secured from unauthorized access.

Quick Facts:

Creates a virtual encrypted disk within a file and mounts it as a real disk

Encrypts an entire hard disk partition or a storage device such as USB flash drive

Encryption is automatic, real-time (on-the-fly) and transparent

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password – Hidden volume – No TrueCrypt volume can be identified – volumes cannot be distinguished from random data

Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS

Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts

System Requirements: Windows 2000/XP/2003/Vista

Download at: Download.com

For those of you who are more interested in protecting files, or folders, on your home computer the two applications above will do the job nicely. Choice is good of course, so here is an additional free program that you might be interested in.

My Lockbox

My Lockbox is a freeware software application that allows you to do just that, and then password protect those files on your computer.

Other users will not have access to these files, nor will they be able to accidentally, or otherwise, view them or manipulate them in any way.

The protected folder (lockbox) is hidden from all other users and applications on your computer; including the Administrator and the System. The lockbox (protected folder), is impossible to access not only from the local computer, but also from the Internet.

Following the on-screen instructions makes this program extremely easy to setup and use. The lockbox location, password, and parameters are configured during the easy setup procedure.

After the setup is completed, the lockbox will be hidden and locked until you, as the user, enter the valid password. My Lockbox Control Panel allows you easily change basic lockbox parameters: lockbox location, protection status, and password.

The program is effective, easy to use and best of all – it’s free.

Quick facts:

Very easy to use

Almost any folder on your computer can be password protected

Instant protection – no file scrambling

Lockbox folder is inaccessible even by the system administrators

Lockbox folder is inaccessible both locally and remotely

Lockbox folder can be protected in Windows safe mode

Hotkeys support – you can popup the Control Panel with a keystroke

Skinned user interface

Freeware

System Requirements: Windows 2000, XP, 2003 Server, Vista

Download at: Download.com