Thursday, June 15, 2006

TrueCrypt - Encrypted USB Drive

TrueCrypt comes in handy for securing external USB or Firewire drives. Especially when those drives are used for backups of sensitive files or if you are going to ship the drives from point A to point B. Or even if you are worried about someone swiping the drive and mounting it on another workstation to access files that you have stored there.

Plus, as long as you know the passphrase and/or have the keyfiles used to decrypt the volume, you can move the USB device from workstation to workstation without losing access to the content.

A. right-click on My Computer, choose "Manage"

  1. Under "Storage", go to "Disk Management"
  2. Find the USB drive that you wish to convert to TrueCrypt (note that this will DESTROY all data on the USB drive)
  3. Remove any existing partitions / drive letters assigned to the USB drive.

B. Create the new partition on the USB drive

  1. Right-click, New Partition
  2. Create a "Primary" partition
  3. Use the entire drive (or only part of the drive if you wish)
  4. Do not assign a drive letter
  5. Do not format the partition
  6. Click "Finish", note the "Disk #"

C. Create the TrueCrypt drive on the partition

  1. Open up TrueCrypt, click on "Create Volume"
  2. Create a standard TrueCrypt volume
  3. Click on "Select Device" and choose the empty USB disk and partition
  4. Double-check that you've selected the correct device
  5. Encryption algorithm: AES, Hash: RIPEMD-160
  6. Size cannot be adjusted
  7. Enter your passphrase twice
  8. Begin the format (NTFS for anything over a few gigabytes)


Once the partition has been formatted with TrueCrypt you can then return to the TrueCrypt window and mount the drive to a drive letter. If this drive is always connected to the system you may wish to mount it upon login by making it a "favorite" volume in TrueCrypt.

No comments: