UiBhelp's public knowledge cards

KI 2084 How to encrypt external storage media - Linux

Loss of storage medium in connection with moving data between computers has been the source of major data leaks in several cases. If you lose a memory stick, the problem is not only that you lose the data, but the data may be misused if it falls into the wrong hands.
How can you safely  move data between different machines? Simple! Follow this guide and you’ll keep your data safely encrypted. This means even if you lose the USB memory stick (or hard drive) the data stored on it is safe and no-one who finds it will be able to access the data.

f you have a relatively new version of Linux it’s even possible to set it up so that you don’t need to enter a password each time.

So if you’re handling data that is sensitive you need to remember to encrypt the USB stick before you put the data on it. How? Read on…

Before you start: make sure the external drive is empty and does not contain any data. This process will delete all data on the drive so if there’s anything there it will be deleted. Make sure it’s not your only copy or your data will be lost forever!
  1. Open Disks (or similar for your distribution).
       
  2. Insert the memory stick in the normal way. You should see it appear in the Disks interface on the left.
       

       
  3. Select your memory stick. You’re now going to format the device. Make sure you’ve selected the main (biggest) partition, right click and select Format Partition…, then select more options > Format disk.
       

       
  4. Give your device am appropriate name (here we’ve used Kryptert but you can use whatever you like).
       

       
  5. Make sure Erase is selected, this securely deletes all data that is already on the device.
    You need to select Internal disk for use with Linux systems only as the Type.
    Check the Password protect volume option.
       
  6. Enter a password. Ideally use a password manager such as KeePass or 1Password to generate and store the password and make it a password that you don’t use for anything else.

    If you lose the password we have no way of recovering the data so make sure you keep it safe!
       

       
  7. Click Format. It can take a little while to format a large drive so maybe grab a coffee.
       
Your memory stick is encrypted and ready for you to use.

When completed you can use the device in the normal way to save files and work and move it between (Linux) computers.

Next time you insert it into a new computer you’ll need to enter the password to be able to access the device.