1
00:00:00,359 --> 00:00:10,599
with all the things about our lives that we've laid bare on our hard drives many

2
00:00:06,680 --> 00:00:13,320
of us have done a woefully bad job of

3
00:00:10,599 --> 00:00:19,560
protecting the things that are for our eyes only I mean sure you can put a

4
00:00:16,400 --> 00:00:21,960
password on your computer but Windows

5
00:00:19,560 --> 00:00:27,720
passwords are notoriously easy to get around and if you share a PC with family

6
00:00:24,920 --> 00:00:34,600
members co-workers or roommates there is often very little to keep them from

7
00:00:30,759 --> 00:00:38,280
rifling through your private files so

8
00:00:34,600 --> 00:00:41,280
what's the security conscious user to do

9
00:00:38,280 --> 00:00:44,079
there are actually Hardware level whole

10
00:00:41,280 --> 00:00:48,879
Drive encryption Solutions but these are mostly designed to keep an attacker from

11
00:00:46,399 --> 00:00:54,520
getting into your data when switching the computer on or from just physically

12
00:00:52,199 --> 00:01:00,559
ripping out your drive and walking away with it once you log into the OS the

13
00:00:57,879 --> 00:01:04,159
entire Drive is decrypted meaning that sharing a computer with

14
00:01:02,359 --> 00:01:10,240
someone or just walking away from it while it's turned on becomes a big

15
00:01:06,320 --> 00:01:13,040
security risk this is where the ability

16
00:01:10,240 --> 00:01:19,400
to encrypt individual files and directories can really help and possibly

17
00:01:17,159 --> 00:01:24,640
the most straightforward way to do this is with file system level

18
00:01:21,799 --> 00:01:30,960
encryption on Windows this takes the form of a baked in technology uncreative

19
00:01:28,000 --> 00:01:37,399
called encrypting file system system or EFS which works with NTFS the main file

20
00:01:35,159 --> 00:01:43,640
system used by modern Windows versions for the desktop here's how it works EFS

21
00:01:41,000 --> 00:01:48,600
allows you to encrypt a file or directory simply by checking a box on

22
00:01:46,360 --> 00:01:52,960
its properties window once you click okay it uses standard public key

23
00:01:51,320 --> 00:01:59,960
cryptography which you can learn more about here to encrypt the file or folder

24
00:01:56,360 --> 00:02:02,799
with a generated key called an FK this

25
00:01:59,960 --> 00:02:07,399
key itself then is encrypted as well with a public key unique to that

26
00:02:04,920 --> 00:02:12,520
particular user and finally the encrypted FK is stored in the files

27
00:02:09,920 --> 00:02:17,680
header when the user wants to go back and access it later it's decrypted with

28
00:02:15,400 --> 00:02:23,120
the user's private key and this is all done seamlessly and transparently so you

29
00:02:20,319 --> 00:02:28,160
won't be continuously prompted for keys or passwords as long as you're logged in

30
00:02:25,519 --> 00:02:33,800
under the account the encryption is tied to the nice thing about this Paradigm as

31
00:02:31,440 --> 00:02:38,760
opposed to whole Drive encryption is that it's much more difficult for other

32
00:02:36,000 --> 00:02:45,400
users logged in under their own accounts to Peak at your files but before you go

33
00:02:43,480 --> 00:02:49,519
rushing off to encrypt all the embarrassing stuff you've filled your

34
00:02:47,080 --> 00:02:56,120
drive with over the years remember that EFS does not obviate the need for a

35
00:02:53,440 --> 00:02:59,840
strong Windows account password a weak password not only makes it easier for an

36
00:02:58,480 --> 00:03:04,799
attacker to log into your account account but it also weakens the

37
00:03:01,959 --> 00:03:09,760
encryption on the files themselves as the cryptographic keys that Windows

38
00:03:07,159 --> 00:03:14,920
generates to do the actual encrypting are based on your password so make sure

39
00:03:13,159 --> 00:03:20,959
you pick a strong password as we discussed in this video but if you don't

40
00:03:18,400 --> 00:03:26,519
feel like having all your data available after login is secure enough and you

41
00:03:23,879 --> 00:03:30,879
want another layer that asks for some kind of verification when you try to

42
00:03:28,799 --> 00:03:35,439
access a file or folder you might want to consider various third-party

43
00:03:32,640 --> 00:03:40,319
encryption tools although these usually aren't as seamless or sexy as file

44
00:03:38,319 --> 00:03:44,200
system level encryption they might provide you with a bit more peace of

45
00:03:42,120 --> 00:03:48,799
mind as they aren't tied to your login and can offer more options such as

46
00:03:46,720 --> 00:03:54,079
stronger encryption algorithms or the ability to create things like hidden

47
00:03:51,439 --> 00:03:58,920
virtual drives to make it exceptionally difficult for snoops to uncover your

48
00:03:56,560 --> 00:04:04,000
secrets But whichever method you choose to secure your individual files the most

49
00:04:01,480 --> 00:04:08,519
robust solution is to combine it with hardware-based whole disk encryption to

50
00:04:06,360 --> 00:04:12,959
frustrate multiple kinds of attacks after all think about the humiliation

51
00:04:10,840 --> 00:04:17,760
you could suffer if someone found those sappy letters to your ex that you forgot

52
00:04:15,439 --> 00:04:22,960
to delete additionally if you're looking to

53
00:04:20,840 --> 00:04:28,040
take your sappy letters to your ex with you on the road how about an encrypted

54
00:04:25,479 --> 00:04:32,759
USB flash drive to protect it from prying eyes the Kingston an encrypted

55
00:04:30,280 --> 00:04:38,919
USB flash drive provides highlevel security with 256-bit AES hardware-based

56
00:04:36,039 --> 00:04:43,479
encryption USB 3 support means you don't have to compromise on transfer speeds

57
00:04:41,199 --> 00:04:49,120
for top-notch security and for additional peace of mind the drive locks

58
00:04:45,960 --> 00:04:51,800
down and reformats itself after 10

59
00:04:49,120 --> 00:04:55,280
intrusion attempts you can also upgrade your drive with built-in antivirus

60
00:04:53,600 --> 00:04:59,479
protection and Remote Management features and if you're curious about the

61
00:04:57,400 --> 00:05:03,919
other secure USB options that Kingston has has they have encrypted USB drives

62
00:05:01,840 --> 00:05:09,000
for all levels of security from entry Lade entry Lade that's a mix between

63
00:05:06,680 --> 00:05:12,520
level and grade entry level all the way up to government and military grade

64
00:05:10,840 --> 00:05:16,840
construction and certification so check them out at the link in the video

65
00:05:14,680 --> 00:05:20,160
description so thanks for watching guys like dislike check out our other

66
00:05:18,240 --> 00:05:22,560
channels comment with video suggestions and

67
00:05:24,759 --> 00:05:31,840
subscribe subscribe dance let's do a new dance move can you do something else

68
00:05:30,120 --> 00:05:36,080
that is a new dance move no youve been doing that for I have not