Probably, each of us has folders and files that we would like to hide from prying eyes. Moreover, when not only you, but also other users work at the computer.
To do this, you can, of course, install or archive it with a password. But this method is not always convenient, especially for the files you are going to work with. For this, a program for file encryption.
1. Encryption program
Despite the large number of paid programs (for example: DriveCrypt, BestCrypt, PGPdisk), I decided to focus in this review on the free one, the capabilities of which are sufficient for most users.
http://www.truecrypt.org/downloads
An excellent program for encrypting data, be it files, folders, etc. The essence of the work is to create a file that resembles a disk image (by the way, new versions of the program allow you to encrypt even an entire partition, for example, you can encrypt a flash drive and use it without fear that anyone - other than you, will be able to read information from it). This file cannot be opened so easily; it is encrypted. If you forget the password for such a file, it is unlikely that you will ever see your files that were stored in it...
What else is interesting:
Instead of a password, you can use a key file (a very interesting option, no file - no access to the encrypted disk);
Several encryption algorithms;
The ability to create a hidden encrypted disk (only you will know about its existence);
Ability to assign buttons for quickly mounting a disk and unmounting it (disconnecting it).
2. Disk creation and encryption
Before we start encrypting data, we need to create our disk, onto which we will copy the files that need to be hidden from prying eyes.
To do this, launch the program and press the “Create Volume” button, i.e. Let's start creating a new disk.
Select the first item “Create an encrypted file container” - create an encrypted container file.
Here we are offered two options for a container file:
1. Normal, standard (one that will be visible to all users, but only those who know the password will be able to open it).
2. Hidden. Only you will know about its existence. Other users will not be able to see your container file.
Now the program will ask you to specify the location of your secret drive. I recommend choosing a drive on which you have more space. Usually such drive is D, because Drive C is the system drive and Windows OS is usually installed on it.
An important step: specify the encryption algorithm. There are several of them in the program. For the average uninitiated user, I will say that the AES algorithm, which the program offers by default, allows you to protect your files very reliably and it is unlikely that any of the users of your computer will be able to hack it! You can select AES and click on “NEXT”.
In this step you can select the size of your disk. Just below, under the window for entering the desired size, the free space on your real hard drive is shown.
Password - several characters (at least 5-6 are recommended) without which access to your secret disk will be denied. I advise you to choose a password that you will not forget even after a couple of years! Otherwise, important information may become inaccessible to you.
If you want to use a strong password, we recommend that you use a generator to create one. The best choice would be a platform that will also answer the question “is my password secure”: https://calcsoft.ru/generator-parolei.
After some time, the program will inform you that an encrypted container file has been successfully created and you can start working with it! Great…
3. Working with an encrypted disk
The mechanism is quite simple: select which container file you want to connect, then enter the password for it - if everything is “OK” - then a new disk appears in your system and you can work with it as if it were a real HDD.
Let's take a closer look.
Right-click on the drive letter that you want to assign to your file container, select “Select File and Mount” from the drop-down menu - select the file and attach it for further work.
The main features of the Folder Lock program are as follows:- AES encryption, key length 256 bits.
- Hiding files and folders.
- Encrypt files (by creating virtual disks - safes) on the fly.
- Online backup.
- Creation of protected USB/CD/DVD disks.
- Encryption of email attachments.
- Creation of encrypted “wallets” storing information about credit cards, accounts, etc.
It would seem that the program has quite enough capabilities, especially for personal use. Now let's look at the program in action. When you first launch the program, you are asked to set a master password, which is used to authenticate the user in the program (Fig. 1). Imagine this situation: you hid files, and someone else launched a program, saw which files were hidden and gained access to them. Agree, not very good. But if the program asks for a password, then this “someone” will not succeed - at least until he guesses or finds out your password.
Rice. 1. Setting a master password at first start
First of all, let's look at how the program hides files. Go to section Lock Files, then either drag files (Fig. 2) and folders into the main area of the program or use the button Add. As shown in Fig. 3, the program allows you to hide files, folders and drives.
Rice. 2. Drag a file, select it and click the button Lock
Rice. 3. Button Add
Let's see what happens when we press the button Lock. I tried to hide the C:\Users\Denis\Desktop\cs.zip file. The file has disappeared from Explorer, Total Commander and other file managers, even if display of hidden files is enabled. The file hiding button is called Lock, and the section Lock Files. However, these UI elements would need to be named Hide and Hide Files, respectively. Because in fact, the program does not block access to the file, but simply “hides” it. Look at fig. 4. Knowing the exact name of the file, I copied it to the cs2.zip file. The file copied smoothly, there were no access errors, the file was not encrypted - it was unpacked as usual.
Rice. 4. Copy a hidden file
The hiding function itself is stupid and useless. However, if you use it in conjunction with the file encryption function - to hide the safes created by the program - then the effectiveness of its use will increase.
In chapter Encrypt Files you can create safes (Lockers). A safe is an encrypted container that, once mounted, can be used like a regular disk - the encryption is not simple, but transparent. The same technique is used by many other encryption programs, including TrueCrypt, CyberSafe Top Secret, and others.
Rice. 5. Encrypt Files section
Click the button Create Locker, in the window that appears, enter a name and select the location of the safe (Fig. 6). Next, you need to enter a password to access the safe (Fig. 7). The next step is to select the file system and safe size (Fig. 8). The safe size is dynamic, but you can set its maximum limit. This allows you to save disk space if you do not use the safe to capacity. If desired, you can create a fixed-size safe, as will be shown in the Performance section of this article.
Rice. 6. Name and location of the safe
Rice. 7. Password to access the safe
Rice. 8. File system and safe size
After this, you will see a UAC window (if it is enabled), in which you will need to click Yes, then a window with information about the created safe will be displayed. In it you need to click the Finish button, after which the Explorer window will open, displaying the mounted container (media), see Fig. 9.
Rice. 9. Virtual disk created by the program
Return to section Encrypt Files and select the created safe (Fig. 10). Button Open Locker allows you to open a closed safe, Close Locker- close open button Edit Options calls up a menu containing commands for deleting/copying/renaming/changing the safe password. Button Backup Online allows you to back up your safe, and not just anywhere, but to the cloud (Fig. 11). But first you have to create an account Secure Backup Account, after which you'll get up to 2TB of storage space and your safes will automatically sync with online storage, which is especially useful if you need to work with the same safe on different computers.
Rice. 10. Operations on the safe
Rice. 11. Create a Secure Backup Account
Nothing happens for nothing. Pricing for storing your safes can be found at secure.newsoftwares.net/signup?id=en. For 2 TB you will have to pay $400 per month. 500 GB will cost $100 per month. To be honest, it's very expensive. For $50-60 you can rent an entire VPS with 500 GB “on board”, which you can use as storage for your safes and even create your own website on it.
Please note: the program can create encrypted partitions, but unlike PGP Desktop, it cannot encrypt entire disks. In chapter Protect USB/CD you can protect your USB/CD/DVD drives, as well as email attachments (Fig. 12). However, this protection is carried out not by encrypting the media itself, but by recording a self-decrypting safe on the corresponding media. In other words, a stripped-down portable version of the program will be recorded on the selected media, allowing you to “open” the safe. This program also does not have any support for email clients. You can encrypt the attachment and attach it (already encrypted) to the email. But the attachment is encrypted with a regular password, not PKI. I think there is no point in talking about reliability.
Rice. 12. Protect USB/CD section
Chapter Make Wallets allows you to create wallets containing information about your credit cards, bank accounts, etc. (Fig. 13). All information, of course, is stored in encrypted form. With all responsibility I can say that this section is useless, since there is no function for exporting information from the wallet. Imagine that you have many bank accounts and you have entered information about each of them into the program - account number, bank name, account owner, SWIFT code, etc. You then need to provide your account information to a third party to transfer the money to you. You will have to manually copy each field and paste it into the document or email. Having an export function would make this task much easier. As for me, it is much easier to store all this information in one common document, which needs to be placed on a virtual disk created by the program - a safe.
Rice. 13. Wallets
Benefits of Folder Lock:
- Attractive and clear interface that will appeal to novice users who speak English.
- Transparent on-the-fly encryption, creating virtual encrypted disks that can be worked with like regular disks.
- Possibility of online backup and synchronization of encrypted containers (safes).
- Ability to create self-decrypting containers on USB/CD/DVD drives.
Disadvantages of the program:
- There is no support for the Russian language, which will complicate the work with the program for users who are not familiar with the English language.
- Questionable functions Lock Files (which simply hides, rather than “locks” files) and Make Wallets (ineffective without exporting information). To be honest, I thought that the Lock Files function would provide transparent encryption of a folder/file on a disk, like the CyberSafe Top Secret program or the file system does.
- Inability to sign files or verify digital signatures.
- When opening a safe, it does not allow you to select a drive letter that will be assigned to the virtual disk that corresponds to the safe. In the program settings, you can only select the order in which the program will assign the drive letter - ascending (from A to Z) or descending (from Z to A).
- There is no integration with email clients, there is only the ability to encrypt the attachment.
- High cost of cloud backup.
PGP Desktop
Symantec's PGP Desktop is a suite of encryption software that provides flexible, multi-level encryption. The program differs from CyberSafe TopSecret and Folder Lock in its close integration into the system shell. The program is built into the shell (Explorer), and its functions are accessed through the Explorer context menu (Fig. 14). As you can see, the context menu has functions for encryption, file signing, etc. Quite interesting is the function of creating a self-decrypting archive - on the principle of a self-extracting archive, only instead of unpacking the archive is also decrypted. However, the Folder Lock and CyberSafe programs also have a similar function.
Rice. 14. PGP Desktop context menu
You can also access the program's functions through the system tray (Fig. 15). Team Open PGP Desktop opens the main program window (Fig. 16).
Rice. 15. Program in the system tray
Rice. 16. PGP Desktop window
Program sections:
- PGP Keys- key management (both your own and imported from keyserver.pgp.com).
- PGP Messaging- management of messaging services. When installed, the program automatically detects your accounts and automatically encrypts AOL Instant Messenger communications.
- PGP Zip- management of encrypted archives. The program supports transparent and opaque encryption. This section implements opaque encryption. You can create an encrypted Zip archive (PGP Zip) or a self-decrypting archive (Figure 17).
- PGP Disk is an implementation of the transparent encryption function. The program can either encrypt an entire hard disk partition (or even the entire disk) or create a new virtual disk (container). There is also a function called Shred Free Space, which allows you to wipe free space on the disk.
- PGP Viewer- here you can decrypt PGP messages and attachments.
- PGP NetShare- a means of “sharing” folders, while the “shares” are encrypted using PGP, and you have the ability to add/remove users (users are identified based on certificates) who have access to the “share”.
Rice. 17. Self-decrypting archive
Regarding virtual disks, I especially liked the ability to create a dynamically sized virtual disk (Figure 18), as well as select an algorithm other than AES. The program allows you to select the drive letter to which the virtual disk will be mounted, and also allows you to automatically mount the disk when the system starts and unmount it when idle (by default, after 15 minutes of inactivity).
Rice. 18. Create a virtual disk
The program tries to encrypt everything and everyone. It monitors POP/SMTP connections and offers to secure them (Figure 19). The same goes for instant messaging clients (Figure 20). It is also possible to protect IMAP connections, but it must be enabled separately in the program settings.
Rice. 19. SSL/TLS connection detected
Rice. 20. PGP IM in action
It's a pity that PGP Desktop does not support popular modern programs like Skype and Viber. Who uses AOL IM now? I think there are few of these.
Also, when using PGP Desktop, it is difficult to configure mail encryption, which only works in interception mode. What if the encrypted mail was already received, and PGP Desktop was launched after receiving the encrypted message. How to decrypt it? You can, of course, but you will have to do it manually. In addition, already decrypted messages are no longer protected in the client. And if you configure the client for certificates, as is done in the CyberSafe Top Secret program, then the letters will always be encrypted.
The interception mode doesn’t work very well either, since a message about mail protection appears every time on every new mail server, and gmail has a lot of them. You will get tired of the mail protection window very quickly.
The program is also not stable (Fig. 21).
Rice. 21. PGP Desktop froze...
Also, after installing it, the system worked slower (subjectively)…
Benefits of PGP Desktop:
- A full-fledged program used for file encryption, signing files and verifying electronic signatures, transparent encryption (virtual disks and whole partition encryption), email encryption.
- Keyserver support keyserver.pgp.com.
- Ability to encrypt the system hard drive.
- PGP NetShare feature.
- Possibility of overwriting free space.
- Tight integration with Explorer.
Disadvantages of the program:
- Lack of support for the Russian language, which will complicate the work with the program for users who do not know English.
- Unstable operation of the program.
- Poor program performance.
- There is support for AOL IM, but no support for Skype and Viber.
- Already decrypted messages remain unprotected on the client.
- Mail protection only works in interception mode, which you will quickly get tired of, since the mail protection window will appear every time for each new server.
CyberSafe Top Secret
As in, there will not be a detailed description of the CyberSafe Top Secret program, since a lot has already been written about it on our blog (Fig. 22).
Rice. 22. CyberSafe Top Secret program
However, we will still pay attention to some points - the most important ones. The program contains tools for managing keys and certificates, and the presence of CyberSafe's own key server allows the user to publish his public key on it, as well as obtain the public keys of other company employees (Fig. 23).
Rice. 23. Key management
The program can be used to encrypt individual files, as was shown in the article. As for encryption algorithms, the CyberSafe Top Secret program supports GOST algorithms and the certified crypto provider CryptoPro, which allows it to be used in government agencies and banks.
The program can also be used to transparently encrypt a folder (Fig. 24), which allows it to be used as a replacement for EFS. And, given that the CyberSafe program turned out to be more reliable and faster (in some scenarios) than EFS, then it is not only possible, but also necessary.
Rice. 24. Transparent encryption of the folder C:\CS-Crypted
The functionality of the CyberSafe Top Secret program is reminiscent of the functionality of the PGP Desktop program - if you noticed, the program can also be used to encrypt email messages, as well as to electronically sign files and verify this signature (section Email digital signature, see fig. 25).
Rice. 25. Section Email digital signature
Like the PGP Desktop program, CyberSafe Top Secret can create virtual encrypted disks and fully encrypt. It should be noted that the CyberSafe Top Secret program can only create virtual disks of a fixed size, unlike the Folder Lock and PGP Desktop programs. However, this drawback is counteracted by the ability to transparently encrypt the folder, and the folder size is limited only by the amount of free space on your hard drive.
Unlike the PGP Desktop program, the CyberSafe Top Secret program cannot encrypt the system hard drive; it is limited only to encrypting external and internal non-system drives.
But CyberSafe Top Secret has the option of cloud backup, and, unlike Folder Lock, this option is absolutely free; more precisely, the cloud backup function can be configured for any service - both paid and free. You can read more about this feature in the article.
It is also worth noting two important features of the program: two-factor authentication and a system of trusted applications. In the program settings, you can either set password authentication or two-factor authentication (Fig. 26).
Rice. 26. Program settings
On the tab Allowed. applications You can define trusted applications that are allowed to work with encrypted files. By default, all applications are trusted. But for greater security, you can set applications that are allowed to work with encrypted files (Fig. 27).
Rice. 27. Trusted applications
Benefits of the CyberSafe Top Secret program:
- Support for GOST encryption algorithms and certified crypto provider CryptoPro, which allows the program to be used not only by individuals and commercial organizations, but also by government agencies.
- Supports transparent folder encryption, which allows you to use the program as a replacement for EFS. Considering that the program provides, such a replacement is more than justified.
- The ability to sign files with an electronic digital signature and the ability to verify the file signature.
- Built-in key server that allows you to publish keys and access other keys that have been published by other company employees.
- The ability to create a virtual encrypted disk and the ability to encrypt the entire partition.
- Possibility of creating self-decrypting archives.
- The possibility of free cloud backup, which works with any service - both paid and free.
- Two-factor user authentication.
- A trusted application system that allows only certain applications to access encrypted files.
- The CyberSafe application supports the AES-NI instruction set, which has a positive effect on program performance (this fact will be demonstrated later).
- The CyberSafe program driver allows you to work over a network, which makes it possible to organize.
- Russian-language program interface. For English-speaking users, it is possible to switch to English.
Now about the shortcomings of the program. The program does not have any particular shortcomings, but since the task was set to honestly compare the programs, shortcomings will still have to be found. To be really picky, sometimes (very, very rarely) non-localized messages like “Password is weak” “slip through” into the program. Also, the program does not yet know how to encrypt the system disk, but such encryption is not always necessary and not for everyone. But all these are small things compared to the freezing of PGP Desktop and its cost (but you don’t know about that yet).
Performance
When working with PGP Desktop, I got the impression (immediately after installing the program) that the computer began to work slower. If it weren’t for this “sixth sense,” this section would not have been in this article. It was decided to measure performance using CrystalDiskMark. All tests are carried out on a real machine - no virtual machines. The laptop configuration is as follows - Intel 1000M (1.8 GHz)/4 GB RAM/WD WD5000LPVT (500 GB, SATA-300, 5400 RPM, 8 MB buffer/Windows 7 64-bit). The car is not very powerful, but it is what it is.The test will be performed as follows. We launch one of the programs and create a virtual container. The container parameters are as follows:
- The virtual disk size is 2048 MB.
- File system - NTFS
- Drive letter Z:
- Seq - sequential write/sequential read test (block size = 1024KB);
- 512K - random write/random read test (block size = 512KB);
- 4K is the same as 512K, but the block size is 4 KB;
- 4K QD32 - random write/read test (block size = 4KB, Queue Depth = 32) for NCQ&AHCI.
Let's start with a regular hard drive so that we have something to compare with. The performance of drive C: (which is the only partition on my computer) will be considered reference. So, I got the following results (Fig. 28).
Rice. 28. Hard drive performance
Now let's start testing the first program. Let it be Folder Lock. In Fig. Figure 29 shows the parameters of the created container. Please note: I am using a fixed size. The results of the program are shown in Fig. 30. As you can see, there is a significant reduction in performance compared to the benchmark. But this is a normal phenomenon - after all, the data is encrypted and decrypted on the fly. Productivity should be lower, the question is how much.
Rice. 29. Folder Lock container parameters
Rice. 30. Folder Lock results
The next program is PGP Desktop. In Fig. 31 - parameters of the created container, and in Fig. 32 - results. My feelings were confirmed - the program really works slower, which was confirmed by the test. But when this program was running, not only the virtual disk, but even the entire system “slowed down,” which was not observed when working with other programs.
Rice. 31. PGP Desktop container parameters
Rice. 32. Results of the PGP Desktop program
All that remains is to test the CyberSafe Top Secret program. As usual, first - the container parameters (Fig. 33), and then the program results (Fig. 34).
Rice. 33. CyberSafe Top Secret container parameters
Rice. 34. Results of the CyberSafe Top Secret program
I think comments will be unnecessary. According to productivity, the places were distributed as follows:
- CyberSafe Top Secret
- Folder Lock
- PGP Desktop
Price and conclusions
Since we tested proprietary software, there is another important factor to consider - price. The Folder Lock application will cost $39.95 for one installation and $259.70 for 10 installations. On the one hand, the price is not very high, but the functionality of the program, frankly speaking, is small. As noted, the file and wallet hiding features are of little use. The Secure Backup feature requires an additional fee, therefore, paying almost $40 (if you put yourself in the shoes of an ordinary user, not a company) just for the ability to encrypt files and create self-decrypting safes is expensive.The PGP Desktop program will cost $97. And note - this is only the starting price. The full version with a set of all modules will cost approximately $180-250 and this is only a 12-month license. In other words, every year you will have to pay $250 to use the program. In my opinion, this is overkill.
The CyberSafe Top Secret program is the golden mean, both in functionality and price. For an ordinary user, the program will cost only $50 (special anti-crisis price for Russia; for other countries the full version will cost $90). Please note, this is how much the most complete version of the Ultimate program costs.
Table 1 contains a comparison table of the features of all three products, which can help you choose your product.
Table 1. Programs and functions
| Function | Folder Lock | PGP Desktop | CyberSafe Top Secret |
| Virtual encrypted disks | Yes | Yes | Yes |
| Encrypt the entire partition | No | Yes | Yes |
| Encrypting the system disk | No | Yes | No |
| Convenient integration with email clients | No | No | Yes |
| Encryption of email messages | Yes (limited) | Yes | Yes |
| File encryption | No | Yes | Yes |
| Digital signature, signing | No | Yes | Yes |
| EDS, verification | No | Yes | Yes |
| Transparent folder encryption | No | No | Yes |
| Self-decrypting archives | Yes | Yes | Yes |
| Cloud backup | Yes (paid) | No | Yes (free) |
| Trusted application system | No | No | Yes |
| Support from a certified crypto provider | No | No | Yes |
| Token support | No | No (no longer supported) | Yes (when installing CryptoPro) |
| Own key server | No | Yes | Yes |
| Two-factor authentication | No | No | Yes |
| Hiding individual files | Yes | No | No |
| Hiding hard drive partitions | Yes | No | Yes |
| Wallets for storing payment information | Yes | No | No |
| GOST encryption support | No | No | Yes |
| Russian interface | No | No | Yes |
| Sequential read/write (DiskMark), MB/s | 47/42 | 35/27 | 62/58 |
| Price | 40$ | 180-250$ | 50$ |
Taking into account all the factors outlined in this article (functionality, performance and price), the winner of this comparison is the CyberSafe Top Secret program. If you have any questions, we will be happy to answer them in the comments.
Tags:
- data encryption
- data protection
Editor's Choice
File encryption programs
Encrypt everything!
Every time information leaks onto the Internet about a scandal involving important documents being leaked somewhere, I ask myself why they were not encrypted? Document security should be everywhere, after all.
Encryption algorithms
The encryption algorithm is like a black box. A dump of the document, image or other file you upload into it is what you get back. But what you see seems crazy.
You can turn this gibberish back into a normal document through the window with the same password that you entered during encryption. This is the only way you will receive the original.
The US government has recognized the Advanced Encryption Standard (AES) as a standard, and all products that are collected here support the AES encryption standard.
Even those who support other algorithms generally recommend using AES.
If you are an encryption expert, you may prefer another algorithm, Blowfish, and perhaps even the Soviet government's GOST algorithm.
But this is completely for fans of extreme entertainment. For the average user, AES is simply an excellent solution.
Public Key Cryptography and Exchange
Passwords are important and you should keep them secret, right? Well, not when using public key infrastructure (PKI), which is used in cryptography.
If I want to send you a secret document, I simply encrypt it with the public key. Once you receive it, you can use it to decrypt the document. It's simple!
Using this system in reverse, you can create a digital signature that verifies that your document came from you and has not been altered. How? Just encrypt it with your private key.
The fact that your public key decrypts it is proof that you have the right to edit it.
PKI support is less common than support for traditional symmetric algorithms.
Many products allow the creation of self-decrypting executable files.
You may also find that the recipient can use a certain tool for free only for decryption.
What's better?
There is now a huge selection of products available in the encryption space.
Everyone simply has to choose a solution that will be convenient in terms of functionality, practical and stylish from the point of view of the interface of the main program window.
A CertainSafe digital safe goes through a multi-step security algorithm that identifies you to the site. You will have to go through multiple authentication checks each time.
Your files are encrypted; if someone tries to hack them, they will fall apart and no one will be able to recreate them. In this case, there is a certain risk, but at the same time, the level of reliability is very decent.
Each piece of the file is then stored on a different server. A hacker who was able to hack one of the servers will not be able to do anything useful.
A lock can encrypt files or simply lock them so that no one can open them. It also offers encrypted lockers to safely store personal confidential information.
Many other useful features include shredding, free space shredding, secure online backup, and self-decrypting files.
VeraCrypt (Windows/OS X/Linux)
VeraCrypt supports truecrypt encryption, which was discontinued last year.
The development team claims that they have already addressed the issue raised during the initial audit of truecrypt and believe that it can still be used as an accessible version for , OS X and .
If you're looking for a file encryption tool that actually works, this is it. VeraCrypt supports AES (the most commonly used algorithm).
It also supports TwoFish and Serpent encryption ciphers, and supports the creation of hidden encrypted volumes.
The software is open source and most of the code base is Truecrypt.
The program is also constantly evolving, with regular security updates and independent audits at the planning stage (according to the developers).
Those of you who have already tried it have praised it for being a great on-the-fly encryption tool and decrypting your files only when you need them. So the rest of the time they are stored in encrypted form.
Users especially note that the program is a powerful tool that is easy to use and always in place. Yes, it lacks a pretty interface or a ton of bells and whistles.
AxCrypt (Windows)
AxCrypt is a free program, open source GNU licensed.
A GPL-licensed encryption tool for Windows that prides itself on being simple, efficient, and secure to use.
It integrates perfectly with the Windows shell, so you can right-click on the file you want to encrypt and issue a command.
Or you can simply configure the executable code so that the file will be locked if not used for a certain period of time. It can be decrypted later, or when the recipient notifies of receipt.
Files with AxCrypt can be decrypted on demand or kept decrypted while they are in use and then automatically encrypted.
It supports 128-bit AES encryption and provides protection against hacking attempts. It is very light (less than 1 MB.)
Everyone decides for themselves which program to use, but if your data is worth anything to you, be sure to think about the fact that you need an encryption program.
Encrypting files and folders in Windows
File encryption programs: Which ones are better to choose?
Every person has information on their computer that they would not like to share with others. For example, personal information, important business and financial documents. However, as a result of unforeseen circumstances or deliberate actions, your data can easily fall into the hands of other people, especially if many users work on the computer. In this case, you need to download a folder encoding program that will protect you from any unpleasant situations. The choice of applications is very large; users can choose from them, which cope equally well with their functions. This article will focus on free applications for encrypting and encoding folders.
One of the simplest and most popular programs is Free Hide Folder for encoding folders and files. You don’t have to spend a lot of time to download the software, because its size is only 1 MB. It is easy and simple to work with, but the result leaves the most pleasant impressions. After launching the shortcut, you need to go to the folder you need. After this, all that remains is to click on the Hide button located on the toolbar. For security, when you first launch the program, you will be prompted to enter a password that protects against any changes. So, don't worry, no person will be able to open and view your personal data unless you tell them the password.
You can also download an equally high-quality Folder Lock program for encrypting and encoding folders. Folder Lock boasts a variety of tools and tools to maintain 100% privacy and confidentiality. The software interface is very unusual and beautiful; it is stylized as a bank safe. You can save countless documents, files and folders in special storage facilities called Lockers. Finally, we note that Folder Lock can protect data from being read on disks and portable storage devices. Any hacking attempt will be reported to you immediately.
Download the program for encoding folders and files for free at maximum speed
If you need to download a powerful tool to hide your own files from prying eyes, you can use TrueCrypt. The utility is considered one of the best for encrypting and encoding folders and attached files. Using the program, you can encrypt a separate folder, a logical drive or an entire hard drive, as well as USB and DVD drives. The software boasts reliable algorithms for encoding folders, and double-hiding mechanisms work here. If you download the TrueCrypt folder encoding program, you can be completely sure that secret information will always be securely hidden from strangers.The principle of modern cryptographic protection is not to create encryption that is impossible to read (this is practically impossible), but to increase the cost of cryptanalysis.
That is, knowing the encryption algorithm itself, but not the key, an attacker must spend millions of years decrypting it. Well, or as much as you need (as you know, information ceases to be important after the death of your loved ones and yourself), until x-files lose their relevance. At the same time, complexity conflicts with ease of use: data must be encrypted and decrypted quickly enough when using a key. The programs that were included in today's review generally satisfy the two mentioned criteria: they are quite easy to use, and at the same time they use moderately robust algorithms.
We'll start with the program, which in itself is worthy of a separate article or a series of articles. Already during installation I was surprised by the additional possibility of creating a false operating system. Immediately after completing the conversation with the installation wizard, DriveCrypt suggested creating a key storage. Any file can be selected as storage: file, picture, mp3. After the path to the storage is specified, we enter passwords, of which we have two types: master & user. They differ in access to DCPP settings - the user does not have the ability to change anything, he can only view the specified settings. Each type can consist of two or more passwords. Actually, access to the security installation can be provided either by the master password or by the user password.
Before encrypting any drives, you need to check that boot protection is installed correctly. Be careful, if you do not check that the boot protection is working correctly and immediately encrypt the disk, it will be impossible to restore its contents. After verification, you can proceed to encrypting the disk or partition. To encrypt a disk or partition, you should
select Disk Drives and click Encrypt. The Disk Encryption Wizard will open a window asking you to select a key from the storage. The disk will be encrypted with this key and the same key will be required for further work with the disk. Once the key is selected, the disk encryption process will begin. The process is quite long: depending on the size of the encrypted disk or partition, it can take up to several hours.
In general, all this is quite simple and standard. It is much more interesting to work with the false axis. Let's format it and distribute it on the hard drive in FAT32 (it seems that rumors about the death of this file system were greatly exaggerated
:)), install Windows, install DriveCrypt. The created false operating system should look like a working one, constantly used. Once the hidden operating system is created, booting and running the fake OS is extremely dangerous as there is a possibility of corrupting the data of the hidden operating system. Having thrown all kinds of garbage into the system, we create a new storage,
Log in to DCPP, switch to the Drives tab, select the section where the false operating system is installed and click HiddenOS. The settings window will open. Everything is simple here: we indicate the path to the newly created storage, passwords, the label of the hidden disk, its file system and the amount of free space that will separate the false operating system from the hidden one. After clicking the Create Hidden OS button, the process of creating a hidden partition will start and all the contents of the system partition will be copied to the hidden partition. The program will create a hidden partition, the beginning of which will be within the space of free space specified when creating the hidden partition from the end of the false partition. Reboot and
We authorize by entering the passwords that were specified when creating the hidden section. The contents of the false operating system will not be visible when working in a hidden OS, and vice versa: when working in a false operating system, the hidden OS will not be visible. Thus, only the password entered when turning on the computer determines which operating system will be loaded. After completing the creation of the hidden operating system, you need to enter it and encrypt the system partition.
Using DriveCrypt, you can encrypt any hard drive or removable storage device (except CDs and DVDs) and use it to exchange data between users. An undoubted advantage of exchanging data on a fully encrypted medium is the impossibility of detecting any files on it; the medium appears unformatted. Even if you have information that the media is encrypted, if the key is missing, the data will be impossible to read.
DriveCrypt encrypts an entire disk or partition, allowing you to hide not only important data, but also the entire contents of the disk or partition, including the operating system. Unfortunately, this level of security comes at the cost of a significant drop in file system performance.
Here we encounter a rather original encryption algorithm with a private key ranging from 4 to 255 characters in length, developed by the authors of the program themselves. Moreover, the key password is not stored inside the encrypted file, which reduces the possibility of hacking it. The principle of operation of the program is simple: we indicate the files or folders that need to be encrypted, after which the program prompts you to enter a key. For greater reliability, the key can be selected not only on the keyboard, but also using a special panel. This panel, it seems, was blatantly stolen from MS Word (insert
- symbol). By confirming the password, we will force the program to encrypt the file, assigning it the extension *.shr.
Files Cipher is capable of compressing encrypted files using a built-in archiving algorithm. In addition, after encryption, the original file can be deleted from the hard drive without the possibility of recovery.
The program works with files of any type, and also supports files larger than 4 Gb (for NTFS). At the same time, the system requirements for the computer are very modest and, unlike the frontman, nothing is consumed.
PGP implements encryption using both open and proven symmetric
keys: AES with encryption up to 256-bit, CAST, TripleDES, IDEA and Twofish2. To manage encryption keys, there is an option called PGP Keys, which displays a window displaying user keys and those added to the list of public keys. Scheme of operation of the module for encrypting PGP Disk disks... mmmmm... how can I say this? Ah, elementary. Again, create a Key Storage file (I call it Key Manager to myself), enter passwords. Moreover, when specifying a password, a special indicator of strength (quality) is displayed, which, by the way, clearly demonstrates the relevance of complex passwords: for example, the strength of a password consisting of eight digits is approximately equal to the strength of a six-letter or four-digit one, which contains one special character (exclamation mark) and three letters.
I really liked that the creators also thought about ICQ (whoever read Stalker’s logs after the motherfucker’s defacement will understand... or were they not in ASI and am I confusing something?). After installation, a special icon appears in the ICQ window, with the help of which session protection is enabled.
As for the most painful topic - information leakage through a swap file - the authors themselves admitted that they were unable to completely block this leakage channel due to the peculiarities of the operating system. On the other hand, measures have been taken to reduce this threat - all important data is stored in memory no longer than necessary. After the operation is completed, all critical information is deleted from memory. Thus, this vulnerability exists, and to eliminate it you need to either disable virtual memory (which can lead to a noticeable deterioration in the operation of the OS) or take additional security measures.
Loading...
