• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 80
  • Last Modified:

Alternative to BitLocker

HI,

I have a user on Windows 7 Pro, so Bitlocker is not an option.

I want to encrypt his entire hard drive, is there a recommended alternative to BitLocker, or can BitLocker be purchased as a stand alone product?

Thanks for assistance and recommendations.
0
mewtd
Asked:
mewtd
3 Solutions
 
McKnifeCommented:
You can change your win7 key to one of the ultimate edition. 20US$ for a used key - that comes with bitlocker.
1
 
AlanConsultantCommented:
Hi,

VeraCrypt is excellent.

Alan.
0
 
McKnifeCommented:
Veracrypt is so "excellent", it totally fails to establish an encryption hierarchy. If you want users to stay users (and not enable them to become admins), don't use veracrypt.
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

 
AlanConsultantCommented:
I'd be interested in understanding what you mean.
0
 
McKnifeCommented:
With bitlocker, users get a PIN and can start the computer, that's all they can do. With veracrypt, they get a password and with it, can do whatever they like: decrypt, destroy, manipulate, copy administrative content, search for passwords...
Known to veracrypt, but is not addressed, because the author does not like TPM chips.
0
 
AlanConsultantCommented:
I'm still not really sure what you mean.

Is there somewhere you read this that you can point me to, that might be able to explain in more detail?

Thanks,

Alan.
0
 
McKnifeCommented:
You understand what offline access  to a drive means? Offline access is possible, when the encryption keys are one and the same for both admins and users. That is what you have with veracrypt. You don't have that with bitlocker, there, only the admin has the recovery key, the user has nothing but the PIN.
0
 
mewtdAuthor Commented:
HI,

Thanks for input. Only one user on this system, and they have admin rights on the system anyway, so perhaps in this case we are ok?

If you think that is safe, I will at least install it and see how it goes for a period.

Many thanks.
0
 
McKnifeCommented:
In that case, you are ok with veracrypt, although integration of bitlocker is so much better and usage is more simple. Will be a pain if you ever chose to upgrade your OS.
0
 
AlanConsultantCommented:
On the upgrading of the OS, I have only done this once, and it was from Win8.1 to Win10 when the free upgrades were available (2015 / 2016?)

My approach was to remove the VeraCrypt (might have been TureCrypt then - I can't recall when it changed over) full-disk encryption first.  It worked fine, but I also had full images to restore, just in case it all went awry.

Interestingly, and with no proof whatsoever, I 'felt' that the machine ran more slowly without the encryption than with, which is completely the opposite of what I had expected.

I take McKnife's point about the difference between VeraCrypt and BitLocker, but not sure I would pay the $20 extra to get BitLocker myself.  Different if you were in a locked down corporate situation, and I will be adding this to my list for clients, although the Windows based ones pretty much only have Win10 Pro now.


Alan.
0
 
nobusCommented:
have a look at BestCrypt also :  https://www.jetico.com/data-encryption
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now