What Encryption Software Do You Recommend?

[@askleonotenboom]

You need the right tool for the job.

[@johnrich3956]

Hey Leo can you make a review video ok Axcrypt software How is that?

[@noncorporeal1024]

With my recent notification that my BoxCryptor account could not be renewed due to the purchase of its IP by Dropbox, I found your review to be very timely, thank you. I am a tad reluctant to have a cloud storage provider also provide the encryption process. I hope Cryptomator proves to be as easy to implement, as I was able to use BoxCryptor on both Microsoft Windows platforms and my Android cell phone. Thank you for your research and sharing.

[@MrSnowMen]

Great points mentioned as usual. I have used many forms of encryption too. Dang, You named all of them... In my digging of old USB hard drives, I did find an old Disgo Security Key with a whole 128 MB, WoW. Need a XP machine to run the software. No new software since... Gosh knows when. I use Linux, Windows and Android. As you mentioned, I am now simplifying my data incase I am not around. How does a loved one access my XYZ daata. KISS always rings a bell. Keep up the great work. From a Geeky PGP4Win user. hehe

[@f2f.photography]

Hey Leo - great video and I like how it was scenario based. What do recommend for a photographer who takes thousands of RAW files a month? Right now, I am using BItlocker but I am concerned that my archives of the photoshoots isn't encrypted on iDrive. Thoughts?

[@aisu825]

7-Zip is OK, but I prefer WinRAR which I have used for many years. WINRar can securely encrypt the file with 256 bits and also encrypt the file names.

[@Marcushin]

Me too, i use winrar more than 10 years for encript.. Never a problem, now i dubt to adopt veracrypt for big cuantity of files , and more usefull..maybe

[@Milesco]

​@@Marcushin _"Now I dubt to adopt veracrypt..."_ *????*

[@matshousetv2799]

7-Zip can encrypt file names if the Archive format chosen is 7z, not zip. When 7z is chosen, another option appears to encrypt file names.

[@Milesco]

Yep -- that's what I do. Works great. 😊

[@epytaffskitchenstink]

I love my Protonmail, I'm just waiting for the ability to put a Cryptomator folder in Proton Drive and then I will be all in Proton

[@cx1291]

Hi Leo, what encryptian would you suggest for a Mac users? Thanks

[@sabdurrauf10]

Are any of these HIPAA compliant?

[@smartmoneyprotocol7280]

amazing knowledge, i like that, if i want to protect my trading files, what is your recommendation?

[@stranded_mariner7695]

I'm running Linux, so for me it's LUKS for disk encryption, Cryfs with gnome-vaults or sirikali for the GUI frontend for cloud, and picocrypt or GnuPG for single files. As for 7zip I believe there is an option when compressing files to "encrypt file names" next to the password input box on the UI.

[@OkonimaSolomon]

Can you pls put me through this

[@stranded_mariner7695]

@@OkonimaSolomon What OS are you running it on?

[@stranded_mariner7695]

@exiledmonastic4650 Kleopatra is a GUI frontend, GnuPG is just basically GPG or the open source implementation of PGP.

[@forest3]

Bitlocker is preferred for whole disk encryption but correct me if I am wrong. The way I understand it in the rare instance the TPM should fail there is no recovering the data even with the recovery key. They say to back up the encrpted disk but to what end. For security purposes how would one secure the backup as well. A second PC perhaps?

[@askleonotenboom]

I backup the contents of my encrypted disk to an external drive, which I then encrypt another way (for example as a zip file, or using the password protection option provided by my backup software.)

[@forest3]

@@askleonotenboom Interesting and something to consider. But are not those other means of encryption vulnerable to brute force? And then of course keeping multiple drives in sync is another can of worms. Thank you sir for your reply and have a great day!

[@jamesedwards3923]

Unless the data itself is corrupted. I have never read of the encryption data being unrecoverable. For example I accidently corrupted a old TrueCrypt file. Held on to it just in case, but I will ever get the data back. I do no use Bitlocker, because I have read about how it can be cracked. Granted all encryption and hashing can be undone given resources and time. I use it very sparingly.

[@jimbojumbo-os1np]

I always set in registry to not use the tpm. I have to enter my password every boot and if any hardware changes happen bitlocker locks itself and i need the recovery key to open the drive. TPM is how most of the bitlocker hacks are possible so that and disabling fast startup so things arent in ram go a long way for security.

[@abirch77]

7zip does allow file names to be encrypted too if one selects that option!

[@askleonotenboom]

in a ".zip" compatible form? I'm pretty sure not. I'm pretty sure filename encryption is used in only the ".7z" format.

[@abirch77]

@@askleonotenboom Hi Leo! You are correct; AFAIK filename encryption is only in .7z format (not the .zip format). I apologize for my mis-interpretation. Thank you for all you do. I have learned so much from you! You are one of my top two go-tos for computing advice and learning! Thank you!! BTW, have you ever ran into Cryptomator only being able to open one vault at a time? It seems when I try to unlock a second vault, it gets stuck at the password/unlock phase (running circle). I can go back and lock and unlock the first vault; but the second stays stuck. Only by ending Cryptomator using task manager can I get out of that loop. Then I can unlock any given vault, re-lock it; and only then (when no other vaults are unlocked) can I unlock a second vault (after the first is locked again and it's virtual drive gone). I've posted a help request in the Cryptomator forums but it seems no one else can replicate this. I was so hopeful for Cryptomator as there does not appear to be any other alternatives now to easily encrypt files going to the Cloud. Thanks again!!

[@TCalhau]

Not Audited!!!

[@franciscohorna5542]

is bitlocker available for windows 10 home or just the pro version

[@askleonotenboom]

Pro.

[@NoEgg4u]

You need the Pro version of Windows, to create a BitLocker volume. But any version of Windows will be able to read a BitLocker volume. Ergo, your Home version will be able to access a BitLocker volume, that was created by a Pro version of Windows. I discovered this when one of my Seagate drives failed, during its warranty period. Part of the warranty included free data recover. Seagate puts your recovered data on yet another drive. They asked me if I wanted encryption. I told them "No.", because the data was useless to anyone else. But, when I got my recovered data back from them (on a physical drive), it was BitLocker protected (Argh!). And Seagate did not give me the password. I was able to call them, and they answered right away, and gave me the password. I was able to use that password to see the recovered data on my Windows Home computer. Seagate's warranty process was very good, and I got a free drive, too. They replaced my failed drive, and sent my recovered data on another drive. Note that if they recover only 1TB of data, then they will send you it on a 1TB drive. So if your 5TB drive looks like it is going to fail, then fill it up (with anything) before it fails. The more data that Seagate recovers, the larger the drive will be that they ship you with the recovered data. Check your warranty to verify if free data recovery is included. Note that Western Digital's recovery service is the opposite of Seagate's recovery service. WD makes it a chore to have your failed drive replaced. They are difficult to contact, and they try to add fees to have them replace your failed drive, have no free data recover, and takes months for them to ship you your replacement drive -- and that is assuming that you call them once per week to make sure that they do not ignore your ticket.

[@MrSnowMen]

Was abount to mention PRO too, As I had spent about an hour attempting to use it to encrypt an external hdd. (Old Win 10 Home laptop)

[@BiswasArt]

WinRar has the ability to protect file names while zipping so the first thing that shows up is the password box and nothing else....I only have partial backup of all my files so I am hesitating to encrypt whole drive....Also Windows removed bitlocker hardware encyption since (I guess 2018) in windows 10 because it didnt work with one specific brand (i think samsung). I dont trust software encrytion that much so there is still a lot to figure out before I go out encrypting my drives.

[@nope6417]

hello, people are still using Bitlocker ?? Strange ... Why not using veracrypt to replace bitlocker and encrypt hdd and system partition in your case ??

[@darkpheonix69008]

Because some boomers can't remember their damn password and need recovery keys even if that means they have to delude themsrlves into thinking their encryption solution in secure, which it isn't.

[@bastiaan0741]

@@darkpheonix69008 You can skip the making of a recovery key.

[@stevekemp5462]

I just downloaded Cryptomator and created a vault and moved several folders there. I then logged off and when I went to go back into the vault it's gone! As in Cryptomator does not recognize I created the vault...but I did...and my files are in it! Now all my files are invisible and I have no way to access them since Cryptomator does not have my vault listed. How do I get this back?

[@askleonotenboom]

Hard to say without knowing the EXACT steps you took, but it sounds like you need to "add" "New vault" and then point it at the existing vault.

[@davideowatching]

The vault you created is somewhere in your computer or external storage, wherever you put it. Ii you can find your vault, I think you can just drag it to the Cryptomator program window and it would be automatically added as an existing vault. All you need to do then is enter your password to unlock it.

[@DrClausTechTips]

A school I work for suggested encryption, format, encrypt again then format again as a way to securely erase a hard drive. Is this a good idea as a posted to wiping software that overwrites with zeros and ones?

[@askleonotenboom]

It's at least as good, and perhaps even a little overkill.

[@ronald0122]

veracrypt or bitlocker for usb drive?

[@nope6417]

Veracrypt of course for hdd and system partition .... Bitlocker is a weak encryption

[@MrCastiel]

Can i encrypt an eksternal harddrive, and then put my files in it to save time?

[@askleonotenboom]

You can encrypt an external hard drive. It's not something that would "save time", so I'm not sure what you're asking or expecting.

[@MrCastiel]

@@askleonotenboom i have an eks harddrive, but if i transfer my files over to my pc, then over to the eksternal harddrive after i have encrypted it. Dont have time for 11 ours..

[@craigmauz]

ProtonMail does Not encrypt email title, but Tutanota does.

[@piece4phil]

i use veracrypt to encrypt the whole hdd of my laptop..

[@uk_bigboss]

Is thier a encryption software or app for Android

[@askleonotenboom]

It's more complex on mobile platforms. It really depends on WHAT you want to encrypt.

[@uk_bigboss]

@@askleonotenboom the whole phone

[@askleonotenboom]

@@uk_bigboss It's built in to the OS. Search settings for "encrypt".

[@jamesedwards3923]

Be explicit what do you want to encrypt? The files? The MicroSD card?

[@korgindiainstrumentalworld]

i want encryption key maker software for korg keyboards for lock there set to particular keyboard serial number ,

[@hornachos]

"If i have bitlocker the hackers cant get int" Really? It can be cracked in few mins

[@askleonotenboom]

Would love you to cite a credible reference on that.

[@boksorunfedaisi6287]

Use "age" instead of PGP/GPG.

[@isheamongus811]

LUKS2

[@DryUrEyesMate]

You lost me at bit locker lol, please guys do not take advice from someone that uses bit locker.

[@pinkiepie1656]

Not a very compelling argument when you don't say why.

[@DryUrEyesMate]

@@pinkiepie1656it’s the easiest encryption to bypass that’s why. Do your own research 👍🏽

[@christoffer4862]

​@@pinkiepie1656BitLocker only supports the AES cipher, not even Rijndael. AES is intentionally construed due to security vulnerabilities from using a single GF transformation mix. The TPM, which BitLocker relies on, offers far more secure algorithms but still isn't used.

[@christoffer4862]

​@@pinkiepie1656I am trying to write why but someone keeps removing my comment

[@wingyu99]

Opus!!!