Securing laptops, data DVDs, USB drives etc

U4EA_2

Hi guys,

I have recently started to think more about data security on my laptop and backups.

One of the main reasons I have been thinking about this is that I currently have multiple online financial accounts that I use on a daily basis and each (obviously) requires a username and password. Logging into these everyday from IE or Firefox is a bit of a chore, and I recently had it suggested to me that I use Roboform to store all the info, which will make my life a bit easier.

While I try not to keep anything very important on my laptop, I am slightly fearful that it might get lost/stolen. Even if it's nothing more than personal pictures, I don't want them going missing or ending up in someone else's hands.

I will very soon be backing up a lot of data to DVD and I am interested in passwording these disks too, as well as stuff I have on my USB drive.

I was just wondering if any of you guys have any input into this?

Thanks,

U4EA

timbim_2

Look into Truecrypt. You won't do any better for free.

isofa

Dump roboform and use keepass, infinitely more secure.

I'd second Truecrypt to secure data, it's better than anything else non commercial, and Open Source.

4743hudsonj

isofa wrote: »

Dump roboform and use keepass, infinitely more secure.

I'd second Truecrypt to secure data, it's better than anything else non commercial, and Open Source.

is it me or do these programs have a flaw in their advertisement.

they say if you use the same passwoprd for everything its dangerous as if someone got it they can get in everywhere. ok, but then, the program uses 1 master password

what if somebody got that...

ok they would have to get your computer too but still, not that secure...

isofa

4743hudsonj wrote: »

is it me or do these programs have a flaw in their advertisement.

they say if you use the same passwoprd for everything its dangerous as if someone got it they can get in everywhere. ok, but then, the program uses 1 master password

what if somebody got that...

ok they would have to get your computer too but still, not that secure...

Things are only secure / safe as the human in charge of them, and most humans aren't the brightest when it comes to security!
So without doubt humans are the weak link in the security chain.

If you don't want to use one of these utilities don't. So then you have to remember lots of passwords, which most users will keep the same for simplicity, or stick on post-it notes in a drawer by the PC. (I work with hundreds of users, and most do this or have a simple p/w they change monthly by adding a digit or month).

If you set a very secure master password for a truecrypt volume, and don't write it down, it'll save you a lot of headache should you lose a USB stick or laptop. Don't secure it, lose it, and have your Windows password cracked in 10 seconds and give all your data away. It doesn't stop you having other items secured in different ways within the truecrypt volume either.

Anyone in the know will change their passwords regularly, and use a very strong setup with letters, numbers and symbols. I only write down hints in code to my passwords, and I have hundreds.

U4EA_2

Thanks a lot guys, I will hopefully set something up tonight!

U4EA_2

Would Ibe right in saying that overall data security on a laptop would be just to keep important, personal files in a TrueCrypt virtual drive?

isofa

U4EA wrote: »

Would Ibe right in saying that overall data security on a laptop would be just to keep important, personal files in a TrueCrypt virtual drive?

You could do, I do this for important projects, or you can set it to encrypt the entire drive as an option, but if you do this, there are some more involved steps and never lose the password!

endure

isofa wrote: »

Dump roboform and use keepass, infinitely more secure.

Any evidence to back this up?

Marty_J

I just make an encrypted disk image for storing important things; I have no idea if you can do something similar using Windows.

BikerEd

4743hudsonj wrote: »

they say if you use the same passwoprd for everything its dangerous as if someone got it they can get in everywhere. ok, but then, the program uses 1 master password

what if somebody got that...

If you want to get really paranoid and have stuff on your disk with real commercial value then you can setup truecrypt with an alternative password which if used would reveal a different set of contents on the drive - they call it a "hidden volume". That way if you have a gun to your head you can be seen to enter a valid password - just not the one that gives access to the real data. Whether this is overkill for most people is another matter...