Why would I need ‘’full disk’’ encryption rather than just encrypting the particular data on the machine?
Just encrypting specific data (files or folders alone) can lead to human error, and therefore data is likely to be compromised. Let us assume a sensitive file is stored on a laptop. That file could be stored, theoretically, not just in the encrypted folder but copied to the desktop or temp filder location – or wherever. If the user does not take particular steps to keep this file in the encrypted folder, then data is exposed. Secondly to encrypt this folder creates subfiles or temporary files which can contain portions of the confidential file. If someone gets hold of a stolen computer, then they could gain access to that temporary file and therefore to the data. With ‘’full disk’’ encryption you are 100% secure.
Related Questions
- What are the benefits of encrypting data at the drive level vs. using an appliance in the network or software encryption?
- Why would I need ‘’full disk’’ encryption rather than just encrypting the particular data on the machine?
- How do I know FreeOTFE is encrypting my data, and with the encryption algorithm I choose?
