Loading...
Loading...
If your laptop is stolen, encryption ensures the thief can't access your files, photos, or financial data. Without it, they can simply remove the drive and read everything.
Your login password doesn't protect your data if someone has physical access to your device.
Encrypts everything on your drive, including OS and all files
Protection: If device is stolen, data is unreadable without password
Tools: BitLocker (Windows), FileVault (macOS), LUKS (Linux)
Encrypts specific files or folders while leaving system unencrypted
Protection: Protects sensitive files even if someone accesses your computer
Tools: AxCrypt, Cryptomator, 7-Zip (encrypted archives)
Encrypts portable storage devices
Protection: Lost USB drives don't expose your data
Tools: BitLocker To Go, VeraCrypt, Disk Utility (Mac)
Windows Pro/Enterprise only
Windows Home users: BitLocker isn't available. Use VeraCrypt (free, open source) for full disk encryption instead.
All Mac editions
Critical: If you choose local recovery key and lose both your password AND the recovery key, your data is permanently lost. Store the recovery key securely offline.
Encrypted by default when passcode is set
Enable: Settings > Face ID & Passcode > Turn Passcode On
Data Protection API encrypts data with your passcode
Most modern devices encrypted by default
Enable: Settings > Security > Encrypt phone (if not default)
Verify: Settings > Security > Encryption status
| Tool | Platform | Type | Cost |
|---|---|---|---|
BitLocker Not available in Windows Home - use VeraCrypt instead | Windows Pro/Enterprise | Full Disk | Built-in |
FileVault XTS-AES-128 with 256-bit key, minimal performance impact | macOS | Full Disk | Built-in |
VeraCrypt Open source, works on Windows Home, creates encrypted containers | Windows, Mac, Linux | Full Disk/Container | Free |
Cryptomator Encrypts files before uploading to cloud storage | All platforms | Cloud File | Free/Paid |
AxCrypt Easy file-level encryption, integrates with right-click | Windows, Mac | File | Free/Paid |
Always back up your recovery key
Store in multiple secure locations - not on the encrypted device itself
Use strong passwords/PINs
Encryption is only as strong as your unlock password
Encrypt external drives
USB drives and external HDDs are easily lost or stolen
Enable encryption on phones
iPhones encrypted by default; Android: Settings > Security > Encrypt phone
Use TPM when available
Trusted Platform Module adds hardware-level protection
Don't skip encryption for convenience
The minor login time is worth protecting years of data
Encryption protects against theft. Backups protect against loss. You need both for complete data protection.