Best encryption software?

[AnthroAndStargate]

Does anyone know the best encryption software for Mac? My g/f is going to Japan to teach English and wants to encrypt her .pdfs, tax info, etc. and other documents.

Any help would be appreciated! Thanks

 

[sourceninja]

I have always used truecrypt on windows and linux. I suspect it works just as great on mac. Plus it has plausible dependability built right in.

 

[ChAoTiCpInOy]

Truecrypt will work, but you could also use FileVault which is built directly into the Mac.

 

[Goosemaster]

Originally posted by: ChAoTiCpInOy
Truecrypt will work, but you could also use FileVault which is built directly into the Mac.

Aye..it's pretty painless to use.

 

[sourceninja]

I thought filevault only encrypts the home (users) directories? and that it is not really compatible with time machine? Most people just want a encrypted container they can mount when they need it and not the overhead of an entire encrypted home directory or filesystem.

For example, I keep my tax info, receipts, errr 'videos', and other personal stuff in a truecrypt volume on my linux server. I mount it when I need it and unmount it when I'm done. I don't think the overhead of using lvm encryption (encrypting the entire partition) is worth it. Plus, if the volume gets currupted, I only lose what is in the volume and not my entire home directory of things that need no security (my mp3s, video games, random downloads, emails (well the non-encrypted ones), calender events, stock image collection, etc).

I'm not very up to date on filevault, but if it can make containers I can easily mount and unmount at will and is secure as truecrypt then it is a very valid option. Providing of course you do not need the more advanced features of truecrypt (hidden volumes, keyfiles, multiple encryption schemes, travelers mode on usb sticks, peer review of source code to ensure security, and being able to use the volumes on windows, linux, or mac).

Actually, I have been concidering getting something setup on my macbook. I want to start storing client info directly on my mac so I do not need to ssh into my office. I of course was going to use truecrypt, but I'll take a deeper look at FileVault.

Another major issue is being able to use different passwords per encrypted volume, I want my passwords separate from my account password.

 

[AnthroAndStargate]

So does File Vault protect her if someone gets the MBP? Shes the only one who uses it so there is no user account password logonor antyhing. Couldnt someone jsut click the home dir and see whats in it if she used filevault? Maybe TrueCrypt would be best

 

[sourceninja]

FileValut requires you to setup a password on your account (from what I've read). It then encrypts the entire home directory as a single file (or in 10.5 a bunch of small files to allow time machine an easier time backing it up.) It has a limitation in time machine that you must restore the entire home directory and can not do single files (again from only what I've read.). It also does not support making volumes to mount anywhere (such as making a volume to put on a usb stick. However, disk utility does allow for this). It also uses the same password as your account, so if someone has your password (or in theory boots into single user mode and changes your password. Not sure if this is possible or not.) then they have compromised your encryption. It is a nice easy solution for people who don't mind the overhead of their entire home folder encrypted and need some basic security. For what I have read, it does not meet my needs. I prefer the features of truecrypt and the ability to recover my data on any major operating system.

 

[umrigar]

http://arstechnica.com/journal...n-utility-on-the-block

She should absolutely password protect her laptop. Also change the security prefs to require a password when waking from sleep or coming out of screen saver.

An password-protected disk image (made with Disk Utility) would also suffice. It could be outside her directory on the root level of the HD, or within her home directory for double security (two passwords).

 

[Goosemaster]

Originally posted by: umrigar
http://arstechnica.com/journal...n-utility-on-the-block

She should absolutely password protect her laptop. Also change the security prefs to require a password when waking from sleep or coming out of screen saver.

An password-protected disk image (made with Disk Utility) would also suffice. It could be outside her directory on the root level of the HD, or within her home directory for double security (two passwords).

True that. A nice sparse bundle using AES is easy as pie to make with Disk Utility

 

[sourceninja]

I agree that is a nice easy way to go. If I had a mac only environment I would consider going that route.

 

[FP]

TrueCrypt is really the best encryption software I have ever found. It is very simple to use and is cross platform. You will never go back to FileVault.