Monday, February 25, 2008

Using Truecrypt to protect your data

In Hong Kong the "pron" photos topic is still very hot. It showed the limitation and contradiction between ethics, Law system and Information Technology. As a so called "IT person", I just want to point out that, if the photo owner had kept the photos well, nothing could have happened. Hence, it is very important for us to protect our personal data.

So how to protect and secure our data? At least we have to achieve the following things:
1. Only the owner can access the data
2. Even the data was stolen, the data still need to be decrypted

In order to implement the above points, the simplest way is to zip the data files with a password. In normal case other people would not access the access so easily. However, if you have a lots of data, just like Mr. Chan who owners thousands of photos, zipping files will be quite trouble. So it is recommended to use a free encryption tool "truecrypt", which can protect your data in an easy and secure way.

Truecrypt is different from Zip, we have to create a blank file and encrypt it (Using password or a keyfile), then mount it as a Windows drive or Linux mount point for storing your sensitive data. That encrypted file can be named or sized as you like, very flexible. Even though your hard disk is stolen, nobody will know which file can be mounted. In addition, you can also encrypt a partition rather than a file, which makes the hackers have a hard time.

There is also a "hidden mode", which is a encrypted area inside the file or partition, but with another password or keyfile. So in some situation you are forced to tell the password, you can just give the password of the "outer" part. As nobody can ensure the existence of the hidden part, your most important data will not be exposed.

Remember, do protected your important data !

Ref:
Truecrypt offical site
Truecrypt Tutorial in Chinese