Disk encryption software

Disk encryption software is a <a href="/facts/Computer_security/7E5dIy7G">computer security</a> software that protects the confidentiality of data stored on computer media (e.g., a <a href="/facts/Hard_disk_drive/kekLSGSE">hard disk</a>, <a href="/facts/Floppy_disk/rShxfuxa">floppy disk</a>, or <a href="/facts/USB_flash_drive/Jv0qmTCF">USB device</a>) by using <a href="/facts/Disk_encryption/v7E50jGw">disk encryption</a>.
Compared to access controls commonly enforced by an <a href="/facts/Operating_system/8XTuvMh2">operating system</a> (OS), encryption passively protects data confidentiality even when the OS is not active, for example, if data is read directly from the hardware or by a different OS. In addition, <a href="/facts/Crypto-shredding/8sgzShAE">crypto-shredding</a> suppresses the need to erase the data at the end of the disk's lifecycle.
Disk encryption generally refers to wholesale encryption that operates on an entire <a href="/facts/Volume_(computing)/g94wpmdC">volume</a> mostly transparently to the user, the system, and applications. This is generally distinguished from file-level encryption that operates by user invocation on a single file or group of files, and which requires the user to decide which specific files should be encrypted. Disk encryption usually includes all aspects of the disk, including directories, so that an adversary cannot determine content, name or size of any file. It is well suited to portable devices such as <a href="/facts/Laptop_computer/3EFwTAb2">laptop computers</a> and <a href="/facts/Thumb_drive/Jv0qmTCF">thumb drives</a> which are particularly susceptible to being lost or stolen. If used properly, someone finding a lost device cannot penetrate actual data, or even know what files might be present.

Disk encryption software open-in-new

Disk encryption software