File encryption program

[Templar87]

Hey guys, got a phone call from my dad looking for a free file encryption program for windows. I was wondering if anyone knew of a good/secure/easy-to-use one? I've googled for "free file encryption" but I don't know any of the names so I can't tell if they're any good or not (or even legit). Any advice much appreciated, cheers.

[peterb]

GnuPGP - BUT it is command line driven and so not intuitive to use. There are some graphical front ends for it, but although they do the job they aren't brilliant.

Here is a starting point:

The GNU Privacy Guard - GnuPG.org

[Templar87]

Ta peterb, I'll try out some of the frontends they have listed there.

On a related note, my dad's wanting this to store an encrypted list of logins and passwords for various sites. My first thought was this was not such a great idea for a number of reasons one of which is the possibility he forgets the master password. Are there any (again, windows-based) solutions to this probem?

[timread]

If you're looking to create encrypted virtual disks, or encrypt entire disks/USB keys etc, then I'd suggest TrueCrypt. Take a look at TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP/2000 and Linux

[Fraz]

Axcrypt. Very good - very easy to use.

[crazyfool]

I would second Truecrypt
I've used it before and it has alot of options and methods of encrypting, storing passwords etc...
And it's free

[lilcompt]

i suggest you search on Free Software Downloads and Software Reviews - Download.com they do alot of freeware and might even find a encryption software you need!!!

[Templar87]

Brilliant, cheers guys :-)

[peterb]

Truecrypt looks good, but better as a bulk (disk encryption) method. Once the encrypted partition is mounted, the data contained in there is open. While that is true of any encrypted file, it is more likely that Truecrypt will contain more files and therefore be opened as a matter of routine. That said, a small Truecrypt partition (it isn't really a partition - more a 'container' could ber used just to store sensitive dats. That said, it is good for protecting data on laptops - encrypt the whole disk and if the laptop is lost, the data is safe.

GnPGP is not the easiest of programs to use, but it is versatile, For example the private key could be stored on a small USB pen, and only inserted in the computer when needed. The passphrase to the private key need not be overly complex. He could also keep the password file on a (different) USB flash drive and only use it whe he wants to access the file - the file may be encrypted if he wishes. He doesn't have to have a password on the private key at all, but in that scenario, which isn't recommended, the physical security of the key is very important.

The real problem with encryption methods isn't the encryption - its the people and te application implemetation! If it is too difficult, it is more bother than it is worth - until the data is stolen. (Bit like backing up - to much effort - until a hard drive fails! ) And talking of backups - if they contain sensitive information, they should be protected too, or only backups of the file in an encrypted state should be taken.

As with most security questions, it comes down to risk assessment - how much risk are you prepared to accept, and convenience - how much inconvenince are you prepared to accept. The answer will be when the two halves of that process are answered.

[vinnyT]

If all he wants it for is to store his passwords, then look at passwordsafe (Password Safe).

It's free and easy to use, can be used from a usb drive (I have it on one of my pendrives), all files are encrypted and safe (of course, as you mention, he will have to remember the master password).

I like, and use, truecrypt but I think that for what your dad wants, it is overkill.

[Templar87]

I think you're onto something there vinny. TrueCrypt looks like something my dad could use for storing any financial data he has, while passwordsafe fits the bill for storing his website logins etc.

[pauldarkside]

For login/password I'd recommend KeyPass - there are installer and portable versions both of which are free. The auto-complete works well and I've found it very reliable. It's updated regularly too

[crazyfool]

Truecrypt looks good, but better as a bulk (disk encryption) method. Once the encrypted partition is mounted, the data contained in there is open. While that is true of any encrypted file, it is more likely that Truecrypt will contain more files and therefore be opened as a matter of routine. That said, a small Truecrypt partition (it isn't really a partition - more a 'container' could ber used just to store sensitive dats. That said, it is good for protecting data on laptops - encrypt the whole disk and if the laptop is lost, the data is safe.

Truecrypt doesn't have to actually encrypt a partition. It can create a file which acts a virtual partition which you can store files in and then when you dismount it, it just appears as a file, then when you open it with truecrypt it appears under my computer as a partition allowing you to access your files.

[streetster]

would it not be easier to print off the document and keep it in a safe place

[Templar87]

Truecrypt doesn't have to actually encrypt a partition. It can create a file which acts a virtual partition which you can store files in and then when you dismount it, it just appears as a file, then when you open it with truecrypt it appears under my computer as a partition allowing you to access your files.

It is quite useful functionality, but possibly overkill for just one username/password list but I can see its potential.

would it not be easier to print off the document and keep it in a safe place

I think we all know that is a *terrible* idea :-P

[directhex]

i like encfs, but there's no useful windows implementation