True Crypt question

[Tiggsy]

Used this before in the form of a complete drive encryption - re-installing as i've gone to W7 and just wondered.....if all i need to do is protect client files do i need full disk encryption or the "just do the partition the OS is on" version......although, if my OS is on my only C drive is there any difference?

[arcturus]

You could just generate an encrypted container for your client files and leave the rest of the drive unencrypted.

[mrmr96]

arcturus said:

You could just generate an encrypted container for your client files and leave the rest of the drive unencrypted.

Yes, but there's a limit on the max container size.

[amir_j]

If normal not ultra confidential files then containers/multiple containers are fine. just follow the wizard through


Alternatively create a partion and then truecrypt that whole partition (thats what ive just done on a netbook). Then remove the drive letter and won't show up at all until mounted.

[//j17]

You have a choice.

I use file containers as I can then have one container per-client but this just protects content in the container. Any files you save outside, either by accident or Windows temporary files, etc are 'exposed'.

Encrypting the partition means everything is in one container but also anything on the partition is encrypted.

For total protection you can encrypt the whole O/S, in which case it doesn't matter where you save thing or, more importantly where Windows saves copies/back-ups/etc - it's all protected. Last I read there was a trick to doing this with W7 though as W7 creates a boot-loader partition at the start of the disk and TrueCrypt expects the encrypted partition to start there. Wasn't really paying attention but think you just needed to move things around for it to work.

[amir_j]

//j17 said:

Last I read there was a trick to doing this with W7 though as W7 creates a boot-loader partition at the start of the disk and TrueCrypt expects the encrypted partition to start there. Wasn't really paying attention but think you just needed to move things around for it to work.

If you have windows 7 or ultimate then these comes with the bitlocker feature which is encrypts the whole drive. I'll be using this when move to 7.

[Tiggsy]

bitlocker is only on ultimate - i didnt bother as true crypt is free.

[amir_j]

forgot the word enterprise in my reply above, only on these two