Not sure is this is the best place to post this question, but wondering what is the best way to encrypt a usb drive?

Want to be able to carry an encrypted flash drive with me but also be able to unlock it, if possible, on various OSes. Preferably with some kind of portable software. Something similar to the method that comes with the Kingston Data Traveler USB drives.

Edit: Seems like Veracrypt and Cryptomator are the best options to check out. Thank everyone!

  • kali@fedia.io
    link
    fedilink
    arrow-up
    8
    arrow-down
    4
    ·
    2 months ago

    Probably far from the best option; but you could use 7zip? Put a 7zip portable exe & linux binary on the usb, put the regular contents in an encrypted .zip file, anyone with the password can decrypt. I assume there are much more secure options though.

    • delirious_owl@discuss.online
      link
      fedilink
      arrow-up
      3
      ·
      2 months ago

      7zip encryption is solid, but the problem with this is that you don’t Mount 7zip, so you have to extract it. Once you extract encrypted files into a drive thats not encrypted, they may as well never have been encrypted in the first place.

      Its better to use a tool that creates an encrypted filesystem that you can mount and read-write directly without copying the files onto another disk

      • Hirom@beehaw.org
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        2 months ago

        ZIP isn’t a good way to encrypt, but what Microsoft is doing is simply reading the email, and decrypting zips with the password found in the email body.

        All encryptions schemes can be trivially broken if you have the key. It’s not even breaking, it’s just normal decryption.

          • Hirom@beehaw.org
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            2 months ago

            While that’s true, but there’s no indication of Microsoft brute forcing with million of combinations.

            The article you link says Microsoft is only trying a few obvious passwords: the filename, and words found in the plaintext message.

            Proper encryption isn’t just about using a strong algorithm. It’s also about proper key management, ie not sending the password in the clear via the same channel as the encrypted files.

            • Possibly linux@lemmy.zip
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 months ago

              Well no ZIP is not secure. There is a plethora of software that can brute force it.

              Do not trust zip encryption. It is not secure and it will likely never be secure. It is like storing your passwords on a spreadsheet