3.9 KiB
3.9 KiB
All your files if placed in a cloud has the potential to be read or flagged for content. As a privacy-conscious user, it is important to take a look at secure encryption tools so that your data remains data meant for only your viewing. This includes viewing vis-a-vis robots as well.
Encryption tools:
Typical encryption setups for computers include BitLocker for Windows or LUKS for Linux. BitLocker is typically an enterprise encryption tool used for businesses but it can also be enabled on Home computers too if you follow these instructions.
Browser Based:
- Hat.sh - provides file encryption within browser
Command Line:
- Kryptor - a simple, modern, and secure file encryption and signing tool for Windows, Linux, and macOS. A leaner, user-firendly alternative to GPG.
- Veracrypt - free open source disk encryption software
- Quite popular. VeraCrypt main features:
- Creates a virtual encrypted disk within a file and mounts it as a real disk.
- Encrypts an entire partition or storage device such as USB flash drive or hard drive.
- Encrypts a partition or drive where Windows is installed (pre-boot authentication).
- Encryption is automatic, real-time(on-the-fly) and transparent.
- Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted.
- Encryption can be hardware-accelerated on modern processors.
- Provides plausible deniability, in case an adversary forces you to reveal the password: Hidden volume (steganography) and hidden operating system.
- More information about the features of VeraCrypt may be found in the documentation
- Quite popular. VeraCrypt main features:
- Cryptomater - for cloud encryption.
- Cryptsetup - an open source utility for disk encryption
- OpenPGP - Open Source implementation of Pretty Good Privacy. Has been around a long time. Good for encrypting email or digitally signing.
- use future defauts when generating keys
- When generating keys we suggest using the
future-default
command as this will instruct GnuPG use modern cryptography such as Curve25519 and Ed25519:gpg --quick-gen-key alice@example.com future-default
- When generating keys we suggest using the
- use future defauts when generating keys
Email:
- Tutanota - privacy-conscious email service with great UI & updating for PQC algorithm-resistant software!
Installing Cryptomater:
- Install MacFUSE
- Download Cryptomater
- Follow the documentation after installing to Applications.
Open an Existing Vault
To open an existing vault, you need to locate the masterkey.cryptomator
file of the vault you wish to open.