How good is Win XP Pro encryption?

Steve Watford · 13 Nov 2006 at 16:40

metalmackey said:
I just looked up how to do this. I already had a nolmhash in my reg which I set to 1 and rebooted. Does it matter the reg key is called nolmhash and not NoLMHash as it said in the guide?

Its the same thing.

zetec452 · 13 Nov 2006 at 18:38

metalmackey said:
Any tips on making the accounts more secure?

truecrypt.org is very good. Worth taking a look at imo.

barnettgs · 13 Nov 2006 at 18:47

I won't think about encrypting, unseen disaster is prone to happen!

See my thread: http://forums.overclockers.co.uk/showthread.php?t=17651892

oddjob62 · 13 Nov 2006 at 19:31

barnettgs said:
I won't think about encrypting, unseen disaster is prone to happen!

See my thread: http://forums.overclockers.co.uk/showthread.php?t=17651892

That's why i mentioned backing up your keys in my first post

stoofa · 14 Nov 2006 at 11:03

Using WinXP encryption is perfect.
It is absolutely secure so long as you use it correctly - so don't encrypt your data with an account that has a blank password for example.
If somebody puts the HD in another machine they won't be getting at your data.

And just remember, back-up your keys and keep them somewhere safe (I have a copy at work in our fire safe).
Because if you forget to take a copy before you reinstall your OS then you will lose access to your data - no back doors, no simple way in, you will lose your data.

Ranger_101 · 14 Nov 2006 at 11:44

If the encryption key is generated from the user password, then won't cracking the password render the encryption useless?

There are programs written to recover 'lost' passwords on xp/2000 that use a linux shell that boots from a floppy.

I would consider an encryption that is not linked to windows in any way.

metalmackey · 14 Nov 2006 at 15:33

Is the key based on the password you had when you first started encrypting, or is it based on a random string?

oddjob62 · 14 Nov 2006 at 16:28

metalmackey said:
Is the key based on the password you had when you first started encrypting, or is it based on a random string?

It's a certificate, not based on the password. It's just that for security reasons, windows will clear it if you try to reset the password from another account.