How to encrypt information on a USB flash drive

Mutt

Professional
Messages
1,057
Reputation
7
Reaction score
581
Points
113
The most common archivers allow you to protect archives with a password. If you are not hiding state secrets, then, as practice shows, this is usually enough to restrict access to important files.

A USB flash drive is a convenient storage device that is often trusted with trade secrets and confidential information.

The device is compact enough to be stowed in a small pocket or attached to a key ring. But the small medium is just as easy to lose along with all the data. If you do not want your personal correspondence and working documents to become the property of the public or intruders, the flash drive should be encrypted.

Why encrypt a USB flash drive?
Flash disk encryption can protect the user from data leakage. The procedure consists in assigning a unique code to the drive, as well as providing it with the AES encryption algorithm. The encrypted USB memory, depending on the settings selected during encryption, may become completely inaccessible to outsiders. You can also choose partial encryption, i.e. encryption of individual directories. As you can see, there are many ways to encrypt a USB flash drive.

An encrypted flash drive guarantees the security of personal data. If it is once lost, then the one who found it will not be able to access the information that is stored on it. Another reason to encrypt a flash drive is security. Using external memory on third-party computers, you can easily pick up a dangerous virus. Most flash encryption solutions protect your external storage from malware.

What and how to encrypt?
Almost every user has information that he would like to avoid disclosure. Whether it's private correspondence, personal photos, passwords, working documents or payment details, which can be used to pay for goods and services on the Web.

If you store sensitive information on a USB drive, you should consider using encryption to protect your data in the event of loss or theft.

Many cryptographic programs have been developed with which you can encrypt a USB flash drive, but not all are suitable for us. The application should only be installed to encode files. Suppose we use USB Flash on computers X, Y and Z. If you need to install program A on all three PCs to work with the drive, it will not work. Decryption should be done quickly, automatically, without installing additional software, by entering a password.

BitLocker To Go
The application replaced TrueCrypt, which found critical security and data integrity issues. The program has an open source code and transparent encryption algorithms, there is a Russian version.

BitLocker can encode any logical drive in Windows, MacOS, UNIX / Linux operating systems. The user chooses the encryption algorithms. It is recommended to leave the default settings.

Microsoft's official website states that BitLocker is not supported on Windows 10 Home. The program works with all other versions of Windows 7-10. Many of them already have BitLocker integrated. And the encryption function is enabled by selecting the appropriate item in the context menu, invoked by right-clicking on the flash drive icon in the explorer.

Keep in mind: the main utility is BitLocker Anywhere, and the BitLocker To Go add-on encrypts flash drives and other removable drives.

USB Safeguard
It is a portable and compact utility that does not require installation. The size of the distribution kit is about 0.5 MB. It encodes flash drives, memory cards, other drives, however, the free version supports media with a capacity of up to 2 GB. But the program uses a reliable encryption algorithm AES with a 256-bit key.

Keep in mind, the first time you use it, the utility will format Flash - don't forget to back up your data!

The application is copied to the drive, after which the user enters and confirms a password and a hint (optional). The program automatically locks the media when the user is inactive, when the drive is disconnected from the PC.

Hardware encryption
Kingston Digital and a number of other vendors are selling drives that already have hardware-based encryption integrated. Cryptographic algorithms are quite reliable. Access to the encrypted disk is carried out by entering a password; moreover, these drives do not depend on the operating system of the computer; no additional software is required to be installed.

When you buy a hardware encrypted device, make sure it uses AES-256 or FIPS compliant bits. My main recommendation from the point of view of reliable IronKey companies

zvAgkPQQyF4.jpg


They have been in business for a very long time and they have really reliable products for consumers all the way down to businesses. If you really need secure flash drives and don't want to do it yourself, then this is the best choice. It's not cheap, but at least you can feel good that your data is kept safe.

On sites like Amazon you will see many cheap options, but if you read the reviews, you will always find people who were “shocked” when something happened and they were able to access the data without entering their password or what something similar.

Alternative ways to encrypt a flash drive
If you do not have one of the above versions of the operating system, then the first step to encrypting a flash drive will be to select and download software. Many famous products can be found on the internet. Most of them are paid, but if you do it once or from time to time, you can use the trial version, which guarantees full access to the program for a short period of time (usually 14 days).

The best USB encryption softwares are:
VeraCrypt is the best and most powerful encryption tool ever;
EncryptStick - This program encrypts USB drives and protects folders with a password;
Rohos Disk Encryption - its activity is focused on the creation of encrypted volumes;
Gilisoft USB Stick - uses AES 256 algorithm;
DriveCrypt - guarantees the safety of files in all popular ways;
Kakasoft USB Security is a fairly mediocre USB encryption program with a limited set of features.


In most cases, programs designed to encrypt a flash drive work in almost the same way. You choose the type of the new encrypted disk and create a new partition. If you want the encrypted flash drive to be accessible only to you, but visible on all devices, then select the standard volume. You can also create a hidden volume.

By default, most programs will offer the AES algorithm (and its various variations). It is worth choosing this option, because it guarantees the safety of the stored data. Now all that remains is to generate a complex password. After completing the procedure, you can use an encrypted USB stick with an individually assigned password! For security reasons, it is recommended to store the password in the classic way - on a sheet of paper.

How to store passwords correctly?
Creating a strong password is half the battle, it still needs to be stored. It is impossible to store very complex passwords in your head, and too simple ones can be compromised with the help of Brute force programs. The wonderful KeePass program comes to the rescue. It will not only allow you to store data under reliable protection, but also help you create a password. All we need is to download the program.

We launch the application and enter the password for the file, which will store all your passwords. Once in the initial menu, we need to create a new record, when creating it, it will be possible to simultaneously come up with a password that will meet the specified requirements. Do not skimp on symbols, create a really complex password, in the future it can be used for a USB flash drive with data encryption. Save all changes and close the program, at the exit you will receive a file, the password for which only you know. Hide it from prying eyes, and at the right time all your passwords, logins and access configurations can be used by just opening one file. Convenient, isn't it?

Dealing with the interface will not be difficult, it is obscenely simple and understandable even for a child. We can create logical partitions, "folders", in which different data will be stored. Drive passwords can be stored in one place, and social media logins in another. In addition, the program is incredibly light and fast.

And finally: if there is a need to restrict access to files, and encryption is not available, use the archiver. The most common archivers allow you to protect archives with a password. If you are not hiding state secrets, then, as practice shows, this is usually enough to restrict access to important files.
 
Top