securing/password protecting a USB flash drive?

guzzbuzz

Hi i want to password protect my USB flash drive, can anybody suggest how is best to do this?

I have been told of a company called "truecrypt" but when i downloaded the file it seemed really confusing and i wasnt sure if i was about to damage/lose all of the files already on my USB flash drive.

Has anybody used truecrypt before?

Or are there other ones out there that might be better/easier to use?

Thanks

Ximian

You can simply password protect a folder or USB drive BUT that's all you're doing, the contents will not be encrypted, this is a simple method for XP though: http://www.ehow.com/how_6767752_password-protect-usb-flash-drives.html

To password protect and encrypt files, I would recommend TrueCrypt, it is free, has very good cryptographic algorithms and is widely used. Here's a step by step guide to encrypt a USB drive:
http://www.makeuseof.com/tag/encrypt-your-usb-stick-with-truecrypt-60/

Or you can try an alternative such as FreeOTFE: http://www.freeotfe.org/download.html
Guide to using FreeOTFE with USB: http://www.wikihow.com/Protect-Private-Data-on-USB-Flash-Drive-Using-FreeOTFE

Safehouse Explorer: http://www.safehouseencryption.com/

Cryptainer LE: http://www.cypherix.com/cryptainerle/index.htm and http://www.cypherix.com/cryptainerle/mobile.htm

guzzbuzz

Ximian wrote: »

You can simply password protect a folder or USB drive BUT that's all you're doing, the contents will not be encrypted, this is a simple method for XP though: http://www.ehow.com/how_6767752_password-protect-usb-flash-drives.html

To password protect and encrypt files, I would recommend TrueCrypt, it is free, has very good cryptographic algorithms and is widely used. Here's a step by step guide to encrypt a USB drive:
http://www.makeuseof.com/tag/encrypt-your-usb-stick-with-truecrypt-60/

Or you can try an alternative such as FreeOTFE: http://www.freeotfe.org/download.html
Guide to using FreeOTFE with USB: http://www.wikihow.com/Protect-Private-Data-on-USB-Flash-Drive-Using-FreeOTFE

Safehouse Explorer: http://www.safehouseencryption.com/

Cryptainer LE: http://www.cypherix.com/cryptainerle/index.htm and http://www.cypherix.com/cryptainerle/mobile.htm

Thank you very much

Looking at the truecrypt guide (on makeuseof) it seems that if i encrypt this pendrive it will only work in a computer where we have administrtaor privielges? That could be quite tricky if one day we need to use somebody elses computer etc?

I regards to the first way (which i think would be adequate) i read the guide but when i click "sharing" it does not let me selct the button that says "Make This Folder Private." it is grey out?

Simplistik

Truecrypt is the way to go..

You can either encrypt the whole drive or just create a file on that drive.

That file gets mounted as a drive when you log into it with Truecrypt and you definitely don't need Admin rights to use it that way.

When mounted as a drive, you just treat it as a normal drive to copy / move files to.
It gets unmounted from the Truecrypt User interface when you have finished.
And always better to unmount the files when completed, rather than just switching off.

One advantage of that method is that you can transfer the file to other drives and easily open it with Truecrypt, as long as your PC has the
Truecrypt.exe and the truecrypt.sys (and truecrypt-x64.sys)files.

guzzbuzz

i have got to the stage where i have these files on the drive, but i cant under stand how to do the final bit:

Step Five – Move The Programs Into The Encrypted Area


Once the encrypted container has been made, you will then have three things sitting in your USB stick – the folder with your programs / files, the folder with the Truecrypt application and the encrypted container you have just made. Now what you are going to do is move your programs and files INSIDE the encrypted container.
You do this by double-clicking “Truecrypt.exe” and “mounting” (choosing) on another drive, the encrypted container you have just made. This opens it up and unencrypts it. When it opens up, just drag your files and programs inside with your mouse. When you’re done, just dismount the container which closes it back up again and heavily encrypts it. No-one can get inside now without knowing the password. So I hope you chose a very good password!
Don’t forget to delete the programs and files which are sitting outside the encrypted container – the ones you just dragged inside the container are copies. If it reassures you, mount the container again, open it up and peek inside. You’ll see your files and apps inside all safe and sound.


I cant make sense of this?!


I have created a pssowrd already but when i try and mount the file it doesnt seem to reconginse it.

Simplistik

It looks like you are trying to move your files into the encrypted container using Truecrypt.

Forget that. Close Truecrypt and mount the encrypted file in this way.

Open Windows Explorer,
Assuming you have made your encrypted container of whatever size and name you gave it,
by the way, it doesn't need an extension after the name, just needs a name,

then you will see that file at the location you stated when encrypting the file.

Now you can't do much with that file in Windows Explorer, apart from copying or moving it.

So what you need to do is open Truecrypt,

Choose one of the drive names on the left of the window, (mine start at K (first free drive letter))

Then click on 'Select File'

Browse to the location of that encrypted file you made, then select it.

Then click on "Mount' and type in the password you used to make the file.
Be careful to type in the password with any Capitals, numbers, etc,

Assuming pw accepted, that will mount the drive on the drive letter you chose above.

Then use Windows Explorer to see that drive listed under your other drives.

Use it as a normal drive to copy/move files to/from

When finished, use Truecrypt to 'Dismount' and the drive in Windows Explorer disappears.


Obviously you decide if you need to back up any of the data/files elsewhere, but just remember, if you lose that password,

YOU WILL NOT GET BACK IN!!


My version of Truecrypt is an older one, but it should resemble what you're seeing..

guzzbuzz

Thanks mate

Ok firstly i have done this all on my USB so the encrpted file is on the usb

So i now saved that file and did as you said, and i know have a g: drive (showing in my computer)

But i want all the encryptiong on my uSB only not on my pc

So what is the next step? save the g: to my USB?

thanks for the help.....

closed

copy the (unencrypted) data files from the usb to your hard disk (for backup purposes if nothing else)

encrypt the flash drive by creating a truecrypt container (*.tc) on the flash drive, big enough to hold your files, leave a little space for the truecrypt exe and anything else you need to carry around unencrypted.

mount the tc file on the flash drive using truecrypt on the pc.

copy the files back to the mounted drive

always dismount the drive and safely remove hardware before pulling the usb drive out, or you could corrupt it and lose everything.

It's generally a good idea to keep the master copies on the c drive.

Stompa

Does this help?

http://www.eui.eu/ServicesAndAdmin/ComputingService/Software/GuideTrueCrypt.aspx

Simplistik

Read the other advice and suggestions to get a feel of how it works..

Don't worry about that G: drive

That's the drive you chose to mount the encrypted file on
Use it to move your files to and when you have finished using it, be sure to use Truecrypt to 'Dismount' from it.

That G: drive will then disappear, it is NOT on your pc.

it is not on your pc because it is just a 'virtual drive' , if you like,
just exists while you mount it from Truecrypt.

The other very good advice given was to be sure to 'Safely Remove Hardware' to unplug your USB flash drive.

Not using Truecrypt to 'Dismount' and just unplugging flash drive could easily corrupt the encrypted container, not allowing you back in, even with the correct pw.

If you decide to encrypt the whole drive, not just to create an encrypted container, then it would be a good precaution to make a backup of Sector 0 (the MBR) of that disk,

But as you are just using an encrypted container (a file), then that won't apply to you.

Well done, you're getting the hang of it

Ximian

guzzbuzz wrote: »

I regards to the first way (which i think would be adequate) i read the guide but when i click "sharing" it does not let me selct the button that says "Make This Folder Private." it is grey out?

Only folders under "My Documents" will have this option to Make Private.