Encrypting USB drives

[ASC1951]

I'm mildly paranoid about losing my USB sticks, given how tiny they are these days. Less worried about having them stolen, although I suppose that is also a risk.

What do people recommend for encryption? I've downloaded TrueCrypt, but it has a 150pp manual and is full of stuff about 'plausible deniability' and 'dismounting partitions', which suggests that I am not the target user.

 

[Carwash]

You don't necessarily need to encrypt at the filesystem level - you could just encrypt the files themselves (the sensitive ones anyway). Something simple like GPG will do this for you.

 

[2Loose]

Password protected ZIP files perhaps?
Nice, easy, secure way to carry files around, with no software required at the destination to unpack them.

 

[MossCommuter]

Consider Microsoft Skydrive (25Gb free) or Google Docs (7Gb I think) instead.

 

[Gerry Attrick]

Axcrypt. Simpler than TrueCrypt but effective.

 

[ASC1951]

Consider Microsoft Skydrive (25Gb free) or Google Docs (7Gb I think) instead.

I already use DropBox, MC, which IME is better than either. Google Docs won't accept files in Excel or Word format, for instance, which completely rules them out for me.

Online backup/storage is fine, but there are occasions where you need to use a USB stick and that is what I want to protect. I'll give AxCrypt a try, thanks GerryAttrick

 

[MossCommuter]

Google Docs won't accept files in Excel or Word format, for instance

yes it will, but go with what is best for you, it was just a thought.

 

[darth vadar]

I'm mildly paranoid about losing my USB sticks.


Do you work for MI 5 ?

 

[ColinJ]

Do you work for MI 5 ?

He could tell you, but then...

 

[SavageHoutkop]

I'm mildly paranoid about losing my USB sticks, given how tiny they are these days. Less worried about having them stolen, although I suppose that is also a risk.

What do people recommend for encryption? I've downloaded TrueCrypt, but it has a 150pp manual and is full of stuff about 'plausible deniability' and 'dismounting partitions', which suggests that I am not the target user.

I've recently started using TrueCrypt and no issues so far. Note I haven't tried using it in Linux yet although I believe it is possible.
Read the quick start guide and move along from there.

It's quite simple, the way I've set it up anyway. You create a 'file' on the USB stick, which effectively you then 'mount' as a new drive (you get to pick your letter). When you open TrueCrypt, you point it to the 'file' and tell it to 'mount', and give it your password. Then Windows shows your nicely encrypted file just like you'd plugged in a USB stick. You get to copy / paste etc just as if it was a normal USB stick, then when you're done you 'dismount' and unplug.

You also can copy your 'file' (beware - large!) to back up without any issues.

(I believe it's possible to run TrueCrypt off the stick itself but have not tried)

 

[ASC1951]

yes [Google Docs will accept Excel and Word format] , but go with what is best for you, it was just a thought.

Are you sure, MC? I'll happily admit to being a bit cackhanded with some online stuff, but my understanding was that GoogleDocs will allow you to upload a .xls file and download a file as a .xls, but all the time you are using it online you have to run it in GoogleDocs proprietary format - which may look like Excel but has most of the features missing.

I don't think you can work on a spreadsheet using your own (or any) version of Excel. If I'm wrong - and it wouldn't be for the first time - by all means correct me.

- - -

There is nothing on my sticks that would endanger public safety or lead to Our Man in Ulan Bator soiling his uniform, but I do occasionally carry a few large spreadsheets which have more personal information than I would want a criminal to have access to. Ideally I just need something that will automatically encrypt the whole drive rather than having to fiddle about encrypting individual files or just relying on passwords which are fairly easily broken.

 

[2Loose]

I agree with your reasons (and wish I was as diligent) but am confused by the ' just relying on passwords which are fairly easily broken.' comment, especially as pretty much all encryption methods rely on a password or 'key' of some kind. Was it in reference to any particular products? (I know pre-2003 versions of Office can be easily broken for example)

 

[MossCommuter]

my understanding was that GoogleDocs will allow you to upload a .xls file and download a file as a .xls, but all the time you are using it online you have to run it in GoogleDocs

Everything you say is correct, it was my understanding of what you meant by "Google Docs won't accept files in Excel or Word format, for instance" that was at fault. To my mind, upload .xls, edit .xls and download .xls is a pretty good definition of "accept"

As it happens, I have abandoned MS Office (in Windows) and OpenOffice (Linux) in favour of Google Docs so the uploading and downloading parts are redundant.

I have not missed any MS functionality.

 

[ASC1951]

I agree with your reasons (and wish I was as diligent) but am confus (I know pre-2003 versions of Office can be easily broken for example)

Ahem - out here at my end of the spiral arm, we are still on Office 2000.

Later versions have so many more features that they are actually less useful for my modest needs. On the rare occasions when I need to export in the latest format, I put the files through Open Office.

 

[benb]

I hope this will be handy.
http://www.makeuseof.com/tag/encrypt-your-usb-stick-with-truecrypt-60/

The only downside that I can see is that you need to be an admin of the PC where you plug your USB in for it to work.
But it does look like it can run directly from the USB without installing anything on the PC you're using.