Windows Security

367 readers

1 users here now

Expert-level Windows security discussions for security professionals: hardening, security updates, policies, standards, privacy, tips, tools, red team, blue team, and other related topics.

NO TECH SUPPORT QUESTIONS

founded 1 year ago

MODERATORS

[email protected]

Most secure method of encrypting partitions on Windows? (infosec.pub)

submitted 1 year ago by [email protected] to c/[email protected]

5 comments fedilink hide all child comments

Hello all, I am wondering, what is the most secure method of encrypting partitions on Windows?

I know about Bitlocker, but I am wondering if there are more secure encryption methods on Windows. That is all.

It's not that specific either, so... as long as your answer fits the question, it's good.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

I think veracrypt and bitlocker are adequate options and the choice will depend on your threat model. Trust a closed source first party tool or an open source third party tool.The ultra-paranoid will probable find problems with both. For casual use, if you are trusting windows anyway I personally dont see the issue with using its encryption as well. In practical terms I think its more important to ensure that whatever tool you are using is configured correctly for your usecase and that the rest of your opsec is up to par (eg password vs tpm based encryption, how you are handling backups, algorithm, hidden partition, etc...) In that sense the best tool is the one you know how to use correctly.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

As a sidenote, I think the more "serious" encryption options like dm-crypt don't cater towards windows usually.