Does any one recommend a Full Disk Encryption software for Windows?
I’ve been looking into VeraCrypt and AxCrypt.
I prefer something open-source. I don’t mind paying for a license; just want something really good, trusted, and fast. I rely on speed, so that’s important, but need the PC fully encrypted.
What’s wrong with bitlocker? Works fine on our company computers. I don’t know about speed impact but by definition anything with good security requires some computation to decrypt even with the key.
Veracrypt. It’s a fork of Truecrypt, so it has been around for a long time, both Veracrypt and Truecrypt have been audited. Most importantly Veracrypt is cross platform.
+1 on BitLocker. It’s a solid choice for encrypting your data, offering robust security that’s integrated directly into Windows. Just go for it—setting it up is straightforward, and it ensures your files stay protected. If you need guidance or run into issues during setup, consider reaching out to character ai customer service for assistance. They might provide step-by-step support or additional resources to make the process even easier.
I’ve had the best experience with BitLocker on Windows and VeraCrypt for cross-platform use. BitLocker is seamless for enterprise environments with TPM, while VeraCrypt gives more control for power users. Just make sure you store recovery keys securely—no point encrypting if you can’t recover. On Linux, LUKS is my go-to. Stability, performance, and open-source trust all matter here.
I used to use Bitlocker, ended up taking it off my boot drive. Veracrypt I find works well for my non-boot drives for FDE. I guess it depends on your threat model. Bitlocker utilizes TPM. And if you have any even fairly recent hw, you probably have TPM 2.0… either on the mobo, or a fTPM in an AMD CPU, or whatever intel calls their fTPM equivalent.
There’s a few issues w/ TPMs. One is that if it’s not on the CPU, keys can be pulled off traces. The other is that even the latest version of TPM, v 2.0, which started in the consumer space w/ 8th gen intel cpu’s I believe (…and we’re STILL stuck on)… is that while AES-256 CAN be on a TPM 2.0 chip, it’s OPTIONAL and manufacturers hear optional and… you can probably guess how they proceed. So you’re probably gonna have AES-128 at best. Now, that’s not a huge issue today. But do you have data that would concern you to be found out in, say 20 years? If your threat model makes you afraid of letters that come in 3’s, well to be honest, good luck lol. Utah has plenty of space for your data to be held until the “time comes”. And that space in Utah and time waiting probably isn’t even gonna be needed.
But despite these issues, for most threat models, Bitlocker will work.
Now, I happen to of worked with someone before I left the workforce that worked 2 jobs. One was a fairly high level (access) job for a pharmaceutical company. She had one hell of a laptop, and it got stolen (along w/ lots and lots of undergarments and other weird weird stuff from her home… what can I say, criminals are, um, interesting). Let’s just say there was a reason that laptop had a 24/7 cellular connection, and it wasn’t just for her. She did her part and reported it stolen. And boy did certain well-paid people go to work after that to secure intellectual property.