drive encryption for laptops and desktop

What is a good free software to download and encrypt drives for laptop and desktop?

Thanks.
shpresaAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Benjamin VoglarIT ProCommented:
What OS?

If you use Windows 7 ent, 8.1 pro use bitlocker. Part of the Windows.
Benjamin VoglarIT ProCommented:
•CipherShed
•Veracrypt

Both the above-mentioned tools are also freeware and works on the ideologies they have borrowed from TrueCrypt.

https://ciphershed.org/
https://veracrypt.codeplex.com/
shpresaAuthor Commented:
windows 7 .

is bitlocker free?
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

LEARN MORE
Benjamin VoglarIT ProCommented:
If you have Windows 7 ent or ultimate, you can use bitlocker, bilocker is integrated in the Windows OS.

https://technet.microsoft.com/en-us/library/ee424299(v=ws.10).aspx

yes and it's free
WebberCommented:
Bitlocker comes with Microsoft Windows. It is considered best practise to use Bitlocker if you are using Microsoft Windows.

VeraCrypt is the most accepted fork from TrueCrypt (which has been discontinued). VeraCrypt is available for Mac, Windows, Linux systems and is open source.
Brian MurphyIT ArchitectCommented:
Free or good?

Microsoft Encryption File Service (EFS) is free.  Software Restriction Policy is free and easy to configure.  It might work better for you depending on your goal.

Now there are several free tools that use MD5 hash or SHA256 hash against the file system.

This is not encryption but creates a digital fingerprint for every single file.

If a single file changes, it won't run.

You can do this with Windows 7 and up using local group policy MMC and Software Restriction Policies

Start, Run, type mmc.exe, click on File, Add\Remove Snap-in, left pane - click on Group Policy Object Editor, Click ADD, Choose "Local Computer", Click OK

Left Pane
Expand Local Computer Policy
Computer Configuration
Windows Settings
Security Settings
Software Restriction Policy
Right Click "Add Software Restriction Policy"

Click on Additional Rules
New File Hash
New Registry Hash
New Certificate Rule (Bind SSL Certificates)
New Path Rule
New Network Zone Rule

Example attached
softwarerestriction.pdf
WebberCommented:
Just a quick note that MD5 is completely and utterly broken.
Brian MurphyIT ArchitectCommented:
Again, depends on goals but this is Microsoft OS.  You did not specify.

In that same area you can do IPSEC Wrapper Policies, set audit levels higher, custom Microsoft FW rules, a lot more.
Brian MurphyIT ArchitectCommented:
Native is now SHA256.  That is why I asked free or good?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Brian MurphyIT ArchitectCommented:
Also, you have low level drive encryption which is actual drive encryption.  Don't lose the passphrase. McAfee is an example.  Or, Bitlocker aforementioned from Microsoft started with Vista I think.  

Then you have file system encryption, aka NTFS file system encryption such as EFS and forward.  EFS is not disk, that would be Bitlocker.

Then you have 1-way hash, aka SHA256.
Brian MurphyIT ArchitectCommented:
Depends on your goal.  None of the above would protect your from SSL 1, 2 or 3 protocols and RC2 and RC 4 cipher suite attacks with browser.

There is a tool, or was a tool from SSLABS www.ssllabs.com

ISCryto.exe

I used this to remove all the low ciphers and disable SSL 2, and 3 which some sites still try to use.

Only TLS 1.0, 1.1, 1.2 is enabled as protocols and I reorder the cipher suite by preference.

So, the file encryption or disk encryption comes in handy if you have confidential data and lose your laptop.  Or, USB Drive, etc.
Brian MurphyIT ArchitectCommented:
If you don't think the aforementioned is a problem.  Just go here:
https://www.ssllabs.com/ssltest/viewMyClient.html?_ga=1.181609383.1663915395.1444167649

Mine is all green, and no vulnerability on every test, only 9 cipher suite combinations and first 4 support forward secrecy.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.