Windows 7 Encryption

Farore · 27 Jul 2009 at 14:33

Hi

I heard that there is an ability to be able to encrypt the boot drive with a certain USB stick or something - so that the whole drive is encrypted unless it is booted up with the stick. Is this true? If so, which editions of Win 7 will have this feature?

I'm sort of regretting not having pre ordered the Professional Edition now, since I am so far led to believe that this is the edition that contains this feature which I want. Hoping someone will clarify for me.

Regards,

Farore

theheyes · 27 Jul 2009 at 15:57

EFS and the like are Pro, Enterprise and Ultimate only as far as I'm aware.

You can have full drive encryption with Truecrypt which works really well. Is it spefically the USB feature you want?

AbsenceJam · 27 Jul 2009 at 16:59

It's only in Enterprise and Ultimate but you can do this with a TrueCrypt keyfile.

Only thing I'd miss from Pro is remote desktop as the latest version seems to be a big upgrade.

Mattus · 27 Jul 2009 at 17:18

I'd just use TrueCrypt. Bulletproof security and works with XP/Vista/7.

Farore · 28 Jul 2009 at 00:18

theheyes said:
EFS and the like are Pro, Enterprise and Ultimate only as far as I'm aware.

You can have full drive encryption with Truecrypt which works really well. Is it spefically the USB feature you want?

Yes, its the USB feature I want. I love the idea no one can get on to my computer without a piece of hard ware I carry around with me every where I go.

Pho · 28 Jul 2009 at 00:24

But what happens if the USB key dies or is lost?

CaptainCrash · 28 Jul 2009 at 00:36

Pho said:
But what happens if the USB key dies or is lost?

Or found (by someone else)?

You can do it with Truecrypt using a keyfile as suggested above, but I think a standard passphrase that you carry around in your head is a better idea - it's unrecoverable by anyone else unless they hold you down and tickle you until you give it up.

You can in fact use both together with Truecrypt, so you'd need the passphrase *and* the USB drive containing the keyfile to access the data, but really it seems like overkill and a good way to lose your data at some stage...

Mattus · 28 Jul 2009 at 01:33

Farore said:
Yes, its the USB feature I want. I love the idea no one can get on to my computer without a piece of hard ware I carry around with me every where I go.

You can guarantee that at some point you'll lose it and your data will be history. It's also no more secure than a strong password.

AbsenceJam · 28 Jul 2009 at 05:20

Mattus said:
You can guarantee that at some point you'll lose it and your data will be history. It's also no more secure than a strong password.

It's pretty cool though.

Farore · 28 Jul 2009 at 22:06

Mattus said:
You can guarantee that at some point you'll lose it and your data will be history. It's also no more secure than a strong password.

I would have a couple of USB sticks that would alow me to boot my PC.

One with me, and one in an obscure location.

You can in fact use both together with Truecrypt, so you'd need the passphrase *and* the USB drive containing the keyfile to access the data, but really it seems like overkill and a good way to lose your data at some stage...

Yes, I would be planning to do both.

Mattus · 28 Jul 2009 at 22:53

Farore said:
Yes, I would be planning to do both.

Why? The encryption is currently unbreakable. It's not as if doing both is going to make you twice as secure, or even any more secure at all. It just makes you more likely to lose your data.