WEBVTT

00:00:00.359 --> 00:00:10.599
with all the things about our lives that we've laid bare on our hard drives many

00:00:06.680 --> 00:00:13.320
of us have done a woefully bad job of

00:00:10.599 --> 00:00:19.560
protecting the things that are for our eyes only I mean sure you can put a

00:00:16.400 --> 00:00:21.960
password on your computer but Windows

00:00:19.560 --> 00:00:27.720
passwords are notoriously easy to get around and if you share a PC with family

00:00:24.920 --> 00:00:34.600
members co-workers or roommates there is often very little to keep them from

00:00:30.759 --> 00:00:38.280
rifling through your private files so

00:00:34.600 --> 00:00:41.280
what's the security conscious user to do

00:00:38.280 --> 00:00:44.079
there are actually Hardware level whole

00:00:41.280 --> 00:00:48.879
Drive encryption Solutions but these are mostly designed to keep an attacker from

00:00:46.399 --> 00:00:54.520
getting into your data when switching the computer on or from just physically

00:00:52.199 --> 00:01:00.559
ripping out your drive and walking away with it once you log into the OS the

00:00:57.879 --> 00:01:04.159
entire Drive is decrypted meaning that sharing a computer with

00:01:02.359 --> 00:01:10.240
someone or just walking away from it while it's turned on becomes a big

00:01:06.320 --> 00:01:13.040
security risk this is where the ability

00:01:10.240 --> 00:01:19.400
to encrypt individual files and directories can really help and possibly

00:01:17.159 --> 00:01:24.640
the most straightforward way to do this is with file system level

00:01:21.799 --> 00:01:30.960
encryption on Windows this takes the form of a baked in technology uncreative

00:01:28.000 --> 00:01:37.399
called encrypting file system system or EFS which works with NTFS the main file

00:01:35.159 --> 00:01:43.640
system used by modern Windows versions for the desktop here's how it works EFS

00:01:41.000 --> 00:01:48.600
allows you to encrypt a file or directory simply by checking a box on

00:01:46.360 --> 00:01:52.960
its properties window once you click okay it uses standard public key

00:01:51.320 --> 00:01:59.960
cryptography which you can learn more about here to encrypt the file or folder

00:01:56.360 --> 00:02:02.799
with a generated key called an FK this

00:01:59.960 --> 00:02:07.399
key itself then is encrypted as well with a public key unique to that

00:02:04.920 --> 00:02:12.520
particular user and finally the encrypted FK is stored in the files

00:02:09.920 --> 00:02:17.680
header when the user wants to go back and access it later it's decrypted with

00:02:15.400 --> 00:02:23.120
the user's private key and this is all done seamlessly and transparently so you

00:02:20.319 --> 00:02:28.160
won't be continuously prompted for keys or passwords as long as you're logged in

00:02:25.519 --> 00:02:33.800
under the account the encryption is tied to the nice thing about this Paradigm as

00:02:31.440 --> 00:02:38.760
opposed to whole Drive encryption is that it's much more difficult for other

00:02:36.000 --> 00:02:45.400
users logged in under their own accounts to Peak at your files but before you go

00:02:43.480 --> 00:02:49.519
rushing off to encrypt all the embarrassing stuff you've filled your

00:02:47.080 --> 00:02:56.120
drive with over the years remember that EFS does not obviate the need for a

00:02:53.440 --> 00:02:59.840
strong Windows account password a weak password not only makes it easier for an

00:02:58.480 --> 00:03:04.799
attacker to log into your account account but it also weakens the

00:03:01.959 --> 00:03:09.760
encryption on the files themselves as the cryptographic keys that Windows

00:03:07.159 --> 00:03:14.920
generates to do the actual encrypting are based on your password so make sure

00:03:13.159 --> 00:03:20.959
you pick a strong password as we discussed in this video but if you don't

00:03:18.400 --> 00:03:26.519
feel like having all your data available after login is secure enough and you

00:03:23.879 --> 00:03:30.879
want another layer that asks for some kind of verification when you try to

00:03:28.799 --> 00:03:35.439
access a file or folder you might want to consider various third-party

00:03:32.640 --> 00:03:40.319
encryption tools although these usually aren't as seamless or sexy as file

00:03:38.319 --> 00:03:44.200
system level encryption they might provide you with a bit more peace of

00:03:42.120 --> 00:03:48.799
mind as they aren't tied to your login and can offer more options such as

00:03:46.720 --> 00:03:54.079
stronger encryption algorithms or the ability to create things like hidden

00:03:51.439 --> 00:03:58.920
virtual drives to make it exceptionally difficult for snoops to uncover your

00:03:56.560 --> 00:04:04.000
secrets But whichever method you choose to secure your individual files the most

00:04:01.480 --> 00:04:08.519
robust solution is to combine it with hardware-based whole disk encryption to

00:04:06.360 --> 00:04:12.959
frustrate multiple kinds of attacks after all think about the humiliation

00:04:10.840 --> 00:04:17.760
you could suffer if someone found those sappy letters to your ex that you forgot

00:04:15.439 --> 00:04:22.960
to delete additionally if you're looking to

00:04:20.840 --> 00:04:28.040
take your sappy letters to your ex with you on the road how about an encrypted

00:04:25.479 --> 00:04:32.759
USB flash drive to protect it from prying eyes the Kingston an encrypted

00:04:30.280 --> 00:04:38.919
USB flash drive provides highlevel security with 256-bit AES hardware-based

00:04:36.039 --> 00:04:43.479
encryption USB 3 support means you don't have to compromise on transfer speeds

00:04:41.199 --> 00:04:49.120
for top-notch security and for additional peace of mind the drive locks

00:04:45.960 --> 00:04:51.800
down and reformats itself after 10

00:04:49.120 --> 00:04:55.280
intrusion attempts you can also upgrade your drive with built-in antivirus

00:04:53.600 --> 00:04:59.479
protection and Remote Management features and if you're curious about the

00:04:57.400 --> 00:05:03.919
other secure USB options that Kingston has has they have encrypted USB drives

00:05:01.840 --> 00:05:09.000
for all levels of security from entry Lade entry Lade that's a mix between

00:05:06.680 --> 00:05:12.520
level and grade entry level all the way up to government and military grade

00:05:10.840 --> 00:05:16.840
construction and certification so check them out at the link in the video

00:05:14.680 --> 00:05:20.160
description so thanks for watching guys like dislike check out our other

00:05:18.240 --> 00:05:22.560
channels comment with video suggestions and

00:05:24.759 --> 00:05:31.840
subscribe subscribe dance let's do a new dance move can you do something else

00:05:30.120 --> 00:05:36.080
that is a new dance move no youve been doing that for I have not