securing/password protecting a USB flash drive?

guzzbuzz

closed wrote: »

copy the (unencrypted) data files from the usb to your hard disk (for backup purposes if nothing else)

encrypt the flash drive by creating a truecrypt container (*.tc) on the flash drive, big enough to hold your files, leave a little space for the truecrypt exe and anything else you need to carry around unencrypted.

mount the tc file on the flash drive using truecrypt on the pc.

copy the files back to the mounted drive

always dismount the drive and safely remove hardware before pulling the usb drive out, or you could corrupt it and lose everything.

It's generally a good idea to keep the master copies on the c drive.

Ok i saved the work to my hardrive before anyway, so im safe in that sense.

i think i have created the encrypted file you talk about, because i have already been through that option where i had to select the file size (it told me i have 2gb free on the usb drive and i created a file that was 1.5gb big)

i can see it on the usb (it looks like one of those files that you have to tell windows what to open it with)

I have done as simplistic suggested and used that encrypted file on my usb to make a new drive g:

Which now sits on my pc, in my computer

But it is empty?

Do i now just copy that encrypted file into that g: drive, add all my files and copy it back to the usb pen drive?

I dont understand this part, about un mounting the drive etc etc this is where im falling short and totally confused?!

Thanks alot for all your help everyone, i think im nearly there with this but its the last bit im not understanding....

closed

does the file have a tc extension, if so that's the truecrypt container file (much like a zip file), you mount it by running truecrypt.exe first, which will make it appear as a new drive letter (it sounds like you've done this, and it's the g: drive)

then copy the files to that new drive letter (G), then unmount in truecrypt when writing has finished, then safely remove usb drive in windows.

you should have the truecrypt.exe on the usb stick, so you can remount on another machine (you may need admin priveledges on other machines to do this)

in summary, the big file (usually .tc extension but doesn't have to be) is all of your encrypted data in one file. To actually use that as a drive it needs to be mounted in truecrypt (which will need the password unless you've set it to automount on your machine, then it is just like any other drive, apart from the fact you need to dismount within truecrypt before pulling it out, to avoid corruption.

guzzbuzz

closed wrote: »

does the file have a tc extension, if so that's the truecrypt container file (much like a zip file), you mount it by running truecrypt.exe first, which will make it appear as a new drive letter (it sounds like you've done this, and it's the g: drive)

then copy the files to that new drive letter (G), then unmount in truecrypt

It doesnt have any extension mate, just a name. I checked in properties but it just says type of file: file

Its one of those files that if you double click it, it will ask you what program to open it with as windows doesnt recognise what it is written in

But the g: drive on my pc is empty, so now your saying copy the files that i want to be secure into that g: ?

Now this file will still be on my pc

Then your saying run truecrpyt again and unmount it?

but how do i get all these files back onto my usb drive?

so when someone puts this drive into any pc it will ask them for a password?

closed

did you use traveller disk setup http://www.truecrypt.org/docs/?s=truecrypt-portable , or

truecrypt, create new volume

create a encrypted file container, standard truecrypt volume

if so, you can simply add the .tc extension, but it's not important, just lets your system associate .tc with truecrypt.

http://www.truecrypt.org/docs/

the minimum you need on a usb drive is the container file, truecrypt.exe and autorun.inf (if you want it to autorun on insertion - this might not work on all systems as autorun functionality is a good way of infecting pc's on insertion of usb sticks so might be turned off in your windows system) In which case, you'd insert the usb stick, run the unencrypted truecrypt.exe, mount volume, point it at your container file, then you have the drive which you can copy files to.

To check what drives are mounted, launch truecrypt.exe

guzzbuzz

closed wrote: »

did you use traveller disk setup http://www.truecrypt.org/docs/?s=truecrypt-portable , or

truecrypt, create new volume

create a encrypted file container, standard truecrypt volume

if so, you can simply add the .tc extension, but it's not important, just lets your system associate .tc with truecrypt.

http://www.truecrypt.org/docs/

the minimum you need on a usb drive is the container file, truecrypt.exe and autorun.inf (if you want it to autorun on insertion - this might not work on all systems as autorun functionality is a good way of infecting pc's on insertion of usb sticks so might be turned off in your windows system) In which case, you'd insert the usb stick, run the unencrypted truecrypt.exe, mount volume, point it at your container file, then you have the drive which you can copy files to.

To check what drives are mounted, launch truecrypt.exe

http://www.makeuseof.com/tag/encrypt...-truecrypt-60/

thats the guide i used and yes it is a travelerdisk set up it advised me to create on there....

then i created the volume folder directly onto my usb pen drive.

i will run you step by step what im doing now.......

i got the following pictures from here: http://www.truecrypt.org/docs/?s=tutorial

but i dont think you will be able to see them in this post.

1) i click truecrypt.exe on my usb drive, it opens up this page:

Step 2: (taken from the above guide at: http://www.truecrypt.org/docs/?s=tutorial)




then i click create volume? and point it at g:

2) then i get this screen:

(taken from the above guide at: http://www.truecrypt.org/docs/?s=tutorial)


Step 3:



i click exactly as shown in the pic......

(taken from the above guide at: http://www.truecrypt.org/docs/?s=tutorial)

3) then i get this page:

Step 4:


i click exactly as shown in the pic.....

4) then i get this screen:

(taken from the above guide at: http://www.truecrypt.org/docs/?s=tutorial)

step5:



5) i clicl select file


6) it opens this page:

(taken from the above guide at: http://www.truecrypt.org/docs/?s=tutorial)

Step 6:



Now at this point, as per simplistic's post, i had also saved that container file on my usb drive into my documents (so now i had one file on my usb drive and one file on my pc in my documents)

I pointed the above picture request to the my documents file and thats the point it made the g: drive on my actual pc

Now just trying to save this again this morning and when i select that container file it is coming up with a msg saying "this file already exists.......do you want to replace it"

I'm totally confused now to be honest, this is really driving me mad.

I just wanted to password protect the files on my usb drive but i feel this is way to complex for me.

Isnt there a much easier way?

I just want a folder or something that i can put all my documents into on my usb drive and then whenever a person puts that usb drive into a computer, and trys to open that file, it requests a password before opening that folder and showing its contents.

Thats all i wanted, its not govenrment documents or the secret codes to a missile launch its just private stuff that i dont want people seeing if i lose my pen drive ever.

I feel true crypt is something far more powerful than i need and its driving me mad trying to get it to work

Somebody else said "cant you just make a briefcase on your usb drive, password protect it, and then put all your files into the briefcase"?

I really do appreciate everyone help but this has taken 2 days now, and i still feel lost lol

Simplistik

Before you go any further or waste any more time, i have to tell you that you WILL need Admin privileges to run Truecrypt!!

All the PCs we have are using using special privileges so it can be a bit confusing.
But when i go to a standard XP machine with an untouched Limited User account, then it won't allow installation, it does indeed inform that it needs Admin privileges,
Sorry about that, my misunderstanding..:(

guzzbuzz

Simplistik wrote: »

Before you go any further or waste any more time, i have to tell you that you WILL need Admin privileges to run Truecrypt!!

All the PCs we have are using using special privileges so it can be a bit confusing.
But when i go to a standard XP machine with an untouched Limited User account, then it won't allow installation, it does indeed inform that it needs Admin privileges,
Sorry about that, my misunderstanding..:(

Thanks mate

But surely there is a more simple way to password protect my stuff on a usb?!

Like i said above this is really driving me mad, and i just wanted a simple password protect of a folder on my usb drive?!

My sandisk usb drive came with one built in (obviously sandisk added this feature into it)

But these methods seem so complex for what i want?

Simplistik

If the Admin access is not a big deal then i would stick with Truecrypt.

Maybe someone else can suggest a simpler, possibly less secure method..
Any ideas, anyone?

But if you want to give Truecrypt another go,
here is a simple guide 'howto' which hopefully answers your questions.

It really isn't difficult to use when you get the hang of it..

Closed has given you all the right info but i don't think you have fully understood how it works yet.
i'll just try to explain it in a different way, so when you re-read everyone else's posts, it makes sense to you.

At one point, i wasn't sure whether you had encrypted the whole drive, or just created a container file.
I think you made the file, which you gave a name to and decided on what size..

So first off open Windows Explorer just to prove to yourself there is NO drive G:

Open Truecrypt, Choose a drive letter from the list on the left,
You chose G last time, but this time choose another, say K
Then in Truecrypt, click on 'Select File'
Browse to the location of the container file and click on 'Open'
Then in Truecrypt, click on 'Mount'
it will ask you for the password,
type that in and it should be accepted
In Truecrypt you will see that file mounted against the drive letter you chose, in this instance, drive K

Minimize Truecrypt, don't close it.

Now when you use Windows Explorer, you should see drive K under your other drives
(no drive G showing because you chose a different drive letter.)

For now, just practice using that container file and until you fully get the hang of it, DON'T MOVE ANY FILES TO DRIVE K, JUST COPY THEM,
just a precaution until you are more confident.

So COPY a few files and folders to drive K

Bring up Truecrypt, click on 'Unmount'
now, when you look for drive K in Windows Explorer, it has disappeared.

That proves to you that drive K only exists when you open Truecrypt and Mount the encrypted file.

Now go through the process of mounting the drive again, this time choosing a different drive Letter.
Then use Windows Explorer to use that new drive in the normal way.
Using Truecrypt to 'Dismount' the drive when finished and carefully removing the USB flash drive, not just by pulling it out, but using the 'Safely Remove Hardware' icon, bottom right in your System tray.
i.e. treat the encrypted file with respect and it will work everytime.


Apologies if too detailed, but hope that helps..

closed

easy way

1 copy all your data files from usb flash drive to c:
2 make sure you can read them on c:
3 quick format your usb drive in windows
4 copy truecrypt.exe to your usb drive
5 launch truecrypt
6 inside truecrypt
click volume
create new volume
create an encrypted file container
standard truecrypt volume
volume location, your usb flash drive letter
filename anything.tc
next
aes
next
choose a size big enough to hold your encrypted files + a little slack, but smaller than the usb drive
choose a password
format volume
exit

you should now have 2 files on your usb flash drive

truecrypt.exe and anything.tc

all you have to do now is launch truecrypt.exe from c or usb drive
highlight a free drive letter inside truecrypt.exe - eg G: h: etc
click select volume at the bottom, point it at anything.tc on the usb flash drive
click mount
enter password
assuming you picked G:
you will now see a g: drive in windows explorer
copy your data from c: to g:
wait for the usb drive to stop flashing
inside truecrypt.exe select dismount all
inside windows, select safely remove hardware near the clock
select usb drive
remove flash drive from pc

repeat the the last paragraph to access your files on this or any other pc in future.

it looks long winded, but should take less than a minute, and the mount dismount process in future a second or two.

guzzbuzz

Simplistik wrote: »

If the Admin access is not a big deal then i would stick with Truecrypt.

Maybe someone else can suggest a simpler, possibly less secure method..
Any ideas, anyone?

But if you want to give Truecrypt another go,
here is a simple guide 'howto' which hopefully answers your questions.

It really isn't difficult to use when you get the hang of it..

Closed has given you all the right info but i don't think you have fully understood how it works yet.
i'll just try to explain it in a different way, so when you re-read everyone else's posts, it makes sense to you.

At one point, i wasn't sure whether you had encrypted the whole drive, or just created a container file.
I think you made the file, which you gave a name to and decided on what size..

So first off open Windows Explorer just to prove to yourself there is NO drive G:

Open Truecrypt, Choose a drive letter from the list on the left,
You chose G last time, but this time choose another, say K
Then in Truecrypt, click on 'Select File'
Browse to the location of the container file and click on 'Open'
Then in Truecrypt, click on 'Mount'
it will ask you for the password,
type that in and it should be accepted
In Truecrypt you will see that file mounted against the drive letter you chose, in this instance, drive K

Minimize Truecrypt, don't close it.

Now when you use Windows Explorer, you should see drive K under your other drives
(no drive G showing because you chose a different drive letter.)

For now, just practice using that container file and until you fully get the hang of it, DON'T MOVE ANY FILES TO DRIVE K, JUST COPY THEM,
just a precaution until you are more confident.

So COPY a few files and folders to drive K

Bring up Truecrypt, click on 'Unmount'
now, when you look for drive K in Windows Explorer, it has disappeared.

That proves to you that drive K only exists when you open Truecrypt and Mount the encrypted file.

Now go through the process of mounting the drive again, this time choosing a different drive Letter.
Then use Windows Explorer to use that new drive in the normal way.
Using Truecrypt to 'Dismount' the drive when finished and carefully removing the USB flash drive, not just by pulling it out, but using the 'Safely Remove Hardware' icon, bottom right in your System tray.
i.e. treat the encrypted file with respect and it will work everytime.


Apologies if too detailed, but hope that helps..

This makes alot more sense mate, thanks alot!

But can i just say that i have this container file both on my pc AND on my usb flash drive

so when i go to that step of "Browse to the location of the container file and click on 'Open'"

I get a msg saying "this file already exists....do you want to replace it" ?

i didnt get this msg yesterday when it made that fake g: drive on my pc

its just comign up today.......do i click yes and replace it?