Home / ubuntu / Questions / 18751
Accepted
Ondrej Sotolar
Asked: 2010-12-25 10:31:18 +0800 CST

How to encrypt external devices using a cross-platform solution?

  • 772

How can I encrypt an external device (i.e. USB keys, external hard-drives, memory sticks, etc.) so that it would subsequently be readable/writable on any computer that I plug it in?

For instance, it should then be possible to easily plug the encrypted device on a Linux, Windows, or OS X machine, and be able to access the contents without any fuss.

How can I do that?

encryption partitioning usb-drive crossplatform hard-drive

7 Answers

  1. Best Answer

    You could also consider installing Truecrypt on your USB. Once installed, use TrueCrypt to create an encrypted container, which can be opened with the software on the key. Saves you time installing software on multiple computers, still leaving you with the encryption you wanted.

    Update since 2014, from TrueCrypt site:

    WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

    This page exists only to help migrate existing data encrypted by TrueCrypt.
    The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP.

    • 7

  2. I would use EncFS which is available for Linux, OS X and Windows. Advantage is that you can also use it with cloud storage since EncFS encrypts on filesystem level and therefore the changes only affect the files changed not a partition as a whole.

    On Linux it's as easy as

    encfs ~/Dropbox/encrypted ~/Private

    I presume it's similar on Windows but I have only tested it between OSX and Linux so far. You can find a little more info here

    On Linux Gnome Encfs Manager is a pretty handy GUI tool to manage EncFS encrypted directories, store passwords in keyring, etc.

    sudo add-apt-repository ppa:gencfsm && sudo apt-get update && sudo apt-get -y install gnome-encfs-manager
    • 7

  3. Truecrypt is probably your best choice, though you'll need to be able to install the software on any computer you want to use.

    Update since 2014, from TrueCrypt site:

    WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues

    This page exists only to help migrate existing data encrypted by TrueCrypt.
    The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP.

    • 5

  4. There is DoxBox:

    Open-Source disk encryption for Windows

    • Easy to use, with a 'wizard' for creating new 'DoxBoxes'.
    • Full transparent encryption, DoxBoxes appear as removable disks in Windows Explorer.
    • Explorer mode lets you access DoxBoxes when you don't have admin permissions.
    • Compatible with Linux encryption, Cryptoloop "losetup", dm-crypt, and LUKS. Linux shell scripts support deniable encryption on Linux.
    • Supports smartcards and security tokens.
    • Encrypted DoxBoxes can be a file, a partition, or a whole disk.
    • Opens legacy volumes created with FreeOTFE
    • Runs on Windows Vista onwards (see note below for 64 bit versions).
    • Supports numerous hash (including SHA-512, RIPEMD-320, Tiger) and encryption algorithms (Including AES, Twofish, and Serpent) in several modes (CBC, LRW, and XTS), giving more options than any other disk encryption software.
    • Optional 'key files' let you use a thumb-drive as a key.
    • Portable mode doesn't need to be installed and leaves little trace on 3rd party PCs (administrator rights needed).
    • Deniable encryption protects you from 'rubber hose cryptography'.

    After open-source computer program FreeOTFE for on-the-fly disk encryption (OTFE) got discontinued, the DoxBox fork sprung up.

    This means that you can encrypt a partition using LUKS (How to encrypt external devices?), and then access it from a Windows machine using DoxBox.

    • 3

  5. I would suggest Kruptos 2 Pro encryption software if you want to use your files on Windows, Mac OS and Android. I would suggest Kruptos 2 Pro is best fit along with any cloud folder integration. Kruptos does support USB drive as well. You can use simply right click context menu.

    • 0

  6. Use VeraCrypt it's been the default replacement to TrueCrypt.

    VeraCrypt is a free open source disk encryption software for Windows, Mac OSX and Linux. Brought to you by IDRIX (https://www.idrix.fr) and based on TrueCrypt 7.1a.

    • 0

  7. The problem with free solutions is that apart from a few, most of them are usually not well maintained or well supported. You have to wait for compatibility updates and bugs resolutions. It is also better to go for container encryption than drive or disk encryption, specially for external drives, as they are more flexible and easier to manage. If you are willing to spend a little, I can suggest BestCrypt containers. They are supported on Windows, Linux, Mac and even Android with a number of algorithms. Instead of encrypting your USB, you can create a container the size of your USB, external hard drives etc. and access them on each platform.

    • -1