I posted quite a while back about
keeping my data on a USB key for easy access and portability. I later posted about using
TrueCrypt for
securing a section of that USB key for sensitive files.
Well, time went on and things changed a bit. First of all, I noticed that having a USB stick in my laptop all the time was draining my battery quite a bit faster than I could live with. This was to be expected, but it wasn't something I was happy with. Second of all, I found that when it came down to it, I really hardly ever used another computer where I needed to bring all my docs and apps over with me. Usually the only time I needed to bring all those files and apps over to another system was when I was either moving to a new laptop entirely, or I was formatting my system and needed to get back up and running again.
Due to the second reason, I changed the size of my TrueCrypt volume to just barely bigger than a standard CD could hold (see
Peter's Evil Overlord List item #99) and kept all my sensitive files and all my portable apps in that one TrueCrypt volume. I then just kept that volume on my hard drive and mounted it as needed. (Which, truthfully, was all the time, since it had my browser in that volume.)
Then it came time to format my system and install Windows Vista Ultimate. Vista Ultimate (and the Business version as well) comes with a feature called BitLocker, which is basically whole-disk encryption. Your entire hard drive is encrypted, which means that if your laptop is stolen, you are safe. They can take the hard drive out of your laptop and hook it up to another computer and they still won't be able to get to your files. Well, alas, my laptop does not have the "Trusted Platform Module" chip inside that makes BitLocker work.
But then I remembered that TrueCrypt also has whole-disk encryption built in. So I figured I might as well try it, since everything was being wiped anyway. If it didn't work, I could just re-wipe and go back to what I was doing before.
Long story short, it works amazingly well. The process is extremely easy to encrypt your entire hard drive. TrueCrypt will not even perform the encryption unless it can read in your CD drive a correctly burned recovery disk. This means that you really have to screw up to lock yourself out of your own computer.
It's a
very comforting thing to know that my
entire hard drive is encrypted. If you own a laptop, I wholeheartedly recommend you do some sort of whole-disk encryption, either through BitLocker (Vista), FileVault (OS X), PGP, or TrueCrypt. (I personally would recommend TrueCrypt because aside from being free, it's also open source. This means that its algorithms and code are subject to peer review.)