Simplest way to encrypt an external USB drive

[pctutor]

I have a client that has a computer that never goes online. The computer stores data (through an Access database), and the data is backed up to a portable USB drive.

The client wants to encrypt that portable drive (just the portable, not the computer itself). What would be the simplest way to do this? I've only done encryption once in the past, but that was with TrueCrypt back when it was supported.

 

[gunslinger]

You did not specify Mac or PC. On a Mac its as simple as opening disk utility and selecting the encrypt option. You are given the option to do 128bit or 256. Done. Anytime you insert that drive into a Mac it will prompt for your passcode.

 

[Mainstay]

Why not use something like an ironkey?

It is very popular with our customers as they immediately see the power of having a hardware encrypted device with an auto-wipe feature.

 

[Larry Sabo]

I'd suggest buying a WD external and setting a password using the included WD SmartWare, then copying the data to it. The drive costs peanuts today and it's always good to backup external drive to another external (and/or to an online repository) because they are so prone to failure and often contain the only copy of data the user wants to preserve. WD Smartware uses AES 256-bit encryption. Put the original drive in a safety deposit box along with the password to the encrypted drive because if they lose the key, the data is gone forever.

 

[FremontPC]

Bitlocker To Go, if Windows Pro or higher.

 

[Markverhyden]

Just be aware if the EU is doing this to satisfy a legal requirement the laptop must also have FDE.

There are a couple of successors to TrueCrypt that have popped up on the horizon, https://truecrypt.ch/ and https://veracrypt.codeplex.com/. And make sure to do what Larry mentioned. Put a copy of the unencrypted data and pass phrase in a safe deposit box. The disk OEM versions work as well but I'd be concerned about being caught in a data recovery situation with one of those.

 

[gunslinger]

Just be aware of the EU is doing this to satisfy a legal requirement the laptop must also have FDE.

I'd recommend file vault. If you are not running an SSD this will slow down the system though.

 

[YeOldeStonecat]

External USB drive with onboard hardware based encryption. Such as http://shop.lenovo.com/us/en/itemdetails/0A65621/460/C137870D130147318E9BF8A5F4FAE077

 

[carrcomp]

Why not use something like an ironkey?

It is very popular with our customers as they immediately see the power of having a hardware encrypted device with an auto-wipe feature.

This.

IronKey would be my recommendation. Hardware level encryption with full wipe.

By default it'll wipe the drive if you put in the wrong password too many times .. you can change that setting though.

 

[cypress]

Iron Key as well also Larry's recommendation is a good one too.