On Windows 10, if you keep sensitive files on your device, it is crucial to take the necessary steps to protect them, and this is when BitLocker comes in handy. BitLocker is a feature that has been around for a long time and provides a way to encrypt data on the hard drive to prevent unauthorized access.

In a nutshell, encryption is the process of making any data unreadable without proper authorization. When you use encryption to scramble your data, it will continue to be unreadable even when sharing it with others. Only you, with the correct encryption key, can decrypt the data to make it usable.

If you've never used BitLocker, the feature offers two methods of encryption: hardware-based encryption using a Trusted Platform Module (TPM) chip and software-based encryption using a password or USB flash drive to decrypt the drive and continue booting. Also, the feature protects the data on the installation drive, secondary storage, and removable media with "BitLocker To Go."

This guide will walk you through setting up BitLocker on a computer to protect your sensitive files on Windows 10.

Before getting started with BitLocker

Here are a few details you need to know before using these instructions:

• BitLocker Drive Encryption is available on Windows 10 Pro and Enterprise. Windows 10 Home edition has its version of BitLocker on select devices. You can use these steps to set it up.
• A Trusted Platform Module (TPM) chip is needed for the best result. This is a special chip that enables the device to support advanced security features.
• BitLocker is available without TPM using software-based encryption, but it requires some extra steps for additional authentication.
• Computer firmware must support TPM or USB devices during startup. If the feature isn't available, check the computer manufacturer for the Basic Input Output System (BIOS) or Unified Extensible Firmware Interface (UEFI) update.
• The computer's hard drive must have two partitions, including a system partition with the necessary files to start the system and a partition with the Windows 10 installation. If the device does not meet the requirements, BitLocker will create them automatically. Also, the hard drive partitions must be formatted with the NTFS file system.
• The encryption process is not complicated, but it can take a lot of time, depending on the drive's amount of data and size.
• Keep the computer connected with an uninterrupted power supply (UPS) throughout the process.

Although BitLocker does a good job securing your data, any system change carries risks. Before proceeding with this guide, you should create a complete computer backup.

How to check if device has TPM support to use BitLocker

To check if a computer has TPM on Windows 10, use these steps:

1. Open Start.
2. Search for Device Manager and click the top result to open the app.
3. Expand the Security devices branch.
4. Confirm the item that reads "Trusted Platform Module" with the version number.

Quick note: The TPM version must be version 1.2 or later to support BitLocker.

Alternatively, you can check your manufacturer's support website for details on whether the device includes the security hardware and the instructions to enable the security feature.

If you have a Surface device, it likely includes a Trusted Platform Module with support for BitLocker encryption.

How to enable (hardware) BitLocker on system drive

To enable BitLocker on a device with TPM, use these steps:

1. Open Start.
2. Search for Control Panel and click the top result to open the app.
3. Click on System and Security.
4. Click on "BitLocker Drive Encryption."

5. Under the "Operating system drive" section, click the "Turn on BitLocker" option.

6. Select the option to save the recovery key:

• Save to your Microsoft account.
• Save to a file.
• Print the recovery.

• Quick tip: If you trust the cloud, save your recovery key in your Microsoft account using the Save to your Microsoft account option. You can always retrieve the encryption key at this OneDrive location.

7. Click the Next button.

8. Select how much the drive space to encrypt:

• Encrypt used disk space only (faster and best for new PCs and drives).
• Encrypt the entire drive (slower but best for PCs and drives already in use).

9. Choose between the two encryption options:

• New encryption mode (best for fixed drives on this device).
• Compatible mode (best for drives that can be moved from this device).

10. Click the Next button.
11. Check the "Run BitLocker system check" option.

12. Click the Continue button.
13. Click the Restart now button.

After you complete the steps, the device will restart, BitLocker will enable, and you will not be prompted to enter a decryption password to continue starting Windows 10.

Although the device will boot quite fast, on Control Panel > System and Security > BitLocker Drive Encryption, you will notice that BitLocker will still be encrypting the drive. Depending on the option you selected and the drive size, this process can take a long time, but you can continue to work on the computer.

After the encryption process, the drive will include a lock icon, and the label will read "BitLocker on."

BitLocker options

Once the drive encryption is enabled, several options will become available, including:

• Suspend protection: This option will stop protecting your files. Usually, you should use this option when upgrading to a new version of Windows 10, firmware, or hardware. If you don't resume the encryption protection, BitLocker will resume automatically during the next reboot.
• Back up your recovery key: If you lose the recovery key and are still signed into your account, you can use this option to create a new backup of the key with the options mentioned in Step 6.
• Change password: This creates a new encryption password, but you will still need to supply the current password to make the change.
• Remove password: You cannot use BitLocker without a form of authentication. You can remove a password only when you configure a new method of authentication.
• Turn off BitLocker: Decrypts all the files on the drive. Also, decryption may take a long time to complete its process depending on the storage size, but you can still use your computer.

How to enable (software) BitLocker on the operating system drive

If the computer does not have a Trusted Platform Module chip, you won't be able to configure BitLocker on Windows 10. However, you can still use encryption if you use the Local Group Policy Editor to enable additional authentication at startup. Once the feature is enabled, you will need to provide a password or USB flash drive with the recovery key to unlock the drive and continue with the computer startup process.

Enable policy without TPM support

To configure BitLocker on devices without a TPM chip, use these steps.

1. Open Start.
2. Search for gpedit and click the top result to open the Local Group Policy Editor.
3. Browse the following path: Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
4. On the right side, double-click the "Require additional authentication at startup" policy.

5. Select the Enabled option.
6. Check the "Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)" option.

7. Click the Apply button.
8. Click the OK button.

Once you complete the steps, BitLocker can be configured on the computer to protect your data.

Enable BitLocker

To enable BitLocker on your device, use these steps:

1. Open Start.
2. Search for Control Panel and click the top result to open the app.
3. Click on System and Security.
4. Click on "BitLocker Drive Encryption."

5. Under the "Operating system drive" section, click the "Turn on BitLocker" option.

6. Click the Next button.
7. Click the Next button again.

8. Click the Restart now button.
9. Click the Next button. (The process should restart automatically.)
10. Select the encryption to unlock method:

• Insert a USB flash drive — requires a flash drive to unlock the device and boot into Windows 10.
• Enter a password — requires a password before booting into Windows 10 (recommended).

10. Create and confirm the password to unlock BitLocker and access your device.

12. Click the Next button.
13. Select the option to save the recovery key:

• Save to your Microsoft account.
• Save to a USB flash drive.
• Save to a file.
• Print the recovery.

13. Click the Next button.
14. Select how much the drive space to encrypt:

• Encrypt used disk space only (faster and best for new PCs and drives).
• Encrypt the entire drive (slower but best for PCs and drives already in use).

14. Choose between the two encryption options:

• New encryption mode (best for fixed drives on this device).
• Compatible mode (best for drives that can be moved from this device).

15. Click the Next button.
16. Check the "Run BitLocker system check" option.
17. Click the Continue button.
18. Click the Restart now button.

After you complete the steps, the computer will restart, and BitLocker will prompt you to enter your encryption password to unlock the drive.

How to enable BitLocker on fixed data drives

To configure BitLocker on a secondary drive, use these steps:

1. Open Start.
2. Search for Control Panel and click the top result to open the app.
3. Click on System and Security.
4. Click on "BitLocker Drive Encryption."

5. Under the "Fixed data drives" section, click the "Turn on BitLocker" option for the secondary drive.

6. Check the "Use a password to unlock the drive" option.

• Quick note: You can also use the "Use my smart card to unlock the drive" option, which is uncommon.

7. Create and confirm the password to unlock BitLocker and access your device.

8. Click the Next button.
9. Select the option to save the recovery key:

• Save to your Microsoft account.
• Save to a USB flash drive.
• Save to a file.
• Print the recovery.

10. Click the Next button.
11. Select how much the drive space to encrypt:

• Encrypt used disk space only (faster and best for new PCs and drives).
• Encrypt the entire drive (slower but best for PCs and drives already in use).

12. Choose between the two encryption options:

• New encryption mode (best for fixed drives on this device).
• Compatible mode (best for drives that can be moved from this device).

13. Click the Next button.
14. Click the Start encrypting button.
15. Click the Close button.

Once you complete the steps, the drive will start using encryption. If the drive already had data, the process could take a long time to complete.

How to enable BitLocker To Go on removable drives

Alternatively, you can use the "BitLocker To Go" feature to encrypt removable drives (such as USB flash and external drives) connected to your computer.

To set up BitLocker To Go on a removable drive, use these steps:

1. Connect the USB drive to the device.
2. Open Start.
3. Search for Control Panel and click the top result to open the legacy app.
4. Click System and Security.
5. Click "BitLocker Drive Encryption."

6. Under the "BitLocker To Go" section, select the removable drive you want to encrypt.
7. Click the "Turn on BitLocker" option.

8. Check the "Use a password to unlock the drive" option.
9. Create a password to unlock the drive.

10. Click Next to continue.
11. Select the option to save the recovery key:

• Save to your Microsoft account.
• Save to a file.
• Print the recovery.

12. Click the Next button.
13. Select how much the drive space to encrypt:

• Encrypt used disk space only (faster and best for new PCs and drives).
• Encrypt the entire drive (slower but best for PCs and drives already in use).

14. Choose between the two encryption options:

• New encryption mode (best for fixed drives on this device).
• Compatible mode (best for drives that can be moved from this device).

• Quick tip: In this case, the Compatibility mode is the recommended option.

15. Click the Next button.
16. Click the Start encrypting button.
17. Click the Close button.

After you complete the steps, the encryption process will begin on the removable drive.

When using encryption, always try to start with an empty drive to speed up the process. Then, the data will encrypt quickly and automatically. In addition, similar to the feature of the operating system drive, you will get the same additional options and a few more, including:

• Add smart card: This option will allow you to configure a smart card to unlock the removable drive.
• Turn on auto-unlock: Instead of typing a password every time you re-connect the removable drive, you can enable auto-unlock to access your encrypted data without entering a password.

How to disable BitLocker on Windows 10

To remove the drive encryption, use these steps:

1. Open Start.
2. Search for Control Panel and click the top result to open the app.
3. Click on System and Security.
4. Click on "BitLocker Drive Encryption."

5. Click the Turn off BitLocker option for the drive you want to remove the encryption.

6. Click the Yes button.

Once you complete the steps, the decryption process will begin, and it will take some time to complete depending on the amount of data.

More resources

For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:

• Windows 10 on Windows Central — All you need to know
• Windows 10 forums on Windows Central

Working from home has become more and more common, and recent global circumstances have forced everyone who can make the switch into a home working environment in the last couple of years. In some ways, this policy shift has been beneficial — research shows that working remotely can lead to higher efficiency, for example — but one of the major downsides of working from home is that home Wi-Fi networks aren't as secure as those used in a business setting. As a result, important company files and databases being compromised has become a serious concern.

The solution to this problem lies with encryption services, and of these, one of the best and most secure options is Tresorit. Tresorit's end-to-end encryption service allows employees to share files and collaborate together from anywhere, without worrying about security breaches. It's essentially a beefed up and more protective version of Dropbox that has all of the same collaboration tools, while also offering significantly better security (business plans even include a control panel that allows administrators to manage company file sharing, too). Tresorit's services have been evaluated by EY Cybersecurity, with the third-party security company finding that Tresorit's encryption is just as effective as it's claimed to be. Tresorit also uses a "zero-knowledge system" that ensures your passwords and encryption keys aren't stored in or transmitted through its servers, guaranteeing that even the company itself won't be able to access your data Tresorit is also fully compliant with ISO27001, HIPAA, FINRA, and GDPR.

A premium feature called Content Shield is also available as part of Tresorit's Enterprise plan. Content Shield allows enables features such as advanced link tracking that allows admins to view how many times a file has been viewed, downloaded, or saved, an Outlook plugin policy that lets admins make Tresorit integration with Outlook mandatory, dynamic watermarking that prevents unauthorized resharing by displaying viewer information as a watermark, and a link activity report that allows admins to look over all shared links in an organization's workflow — even access logs.

What about file storage? Tresorit offers plenty of it, with up to 2TB of storage per user and up to a 20GB file size limit available in business plans. There are also plans for individuals that include max storage sizes of up to 2.5TB and max file sizes of up to 10GB as well. Tresorit also features a local file manager that can be installed on any Windows or macOS device, allowing users to safely and securely send files to company cloud storage.

It's important to note that people won't always be at their computers when they need to send or receive documents, and this is where Tresorit's mobile app comes in. Available on both the Apple App Store and Google Play Store, this app brings the functionality and efficiency of Tresorit to your iPhone. This is incredibly convenient and will ensure your team's workflow won't be slowed down just because someone isn't at their computer.

Finally, the service is also very affordable at both the individual and business level, which will no doubt be a big help to individuals and businesses looking for encryption that's both effective and budget-friendly. Prices for individual plans start at $10.42/month, while business plans start at $14.50/month.

Ultimately, between its superb encryption services, its convenient and plentiful file storage, and its customer-friendly pricing that offers plenty of bang for the buck, you can't go wrong with Tresorit.

It's no secret that the past year has been quite the crazy one, with more people turning a small corner of their home into an office. Gone are the days where everyone had to huddle in cubicles to get their work done, but creates new privacy concerns with employees using home Wi-Fi networks. . That's where a service like Tresorit comes in, providing the end-to-end encryption of those important files, regardless of whether you're in the office or at home.

With more people working from home, this opens the door for potential security issues as your home network is likely not as secure as the one at the office. Companies outfit their offices with ultra-fast internet, along with some sort of VPN to try and deter any hackers or malicious parties attempting to gain access.

But with the move to the home office, you likely don't have the same security measures in place. Thanks to Tresorit, you can get everything set up and working, keeping your data and information private, even if you or your employees are working away from the office.

One of the biggest examples of the potential issues found with working from home on an unencrypted server are the recent security breaches from popular video-calling services. In one instance, an exploit was discovered which allowed remote control access to be gained through a desktop application. But the worst part was that the exploit did not require the interaction of the user, and still provided access to the end-user's computer.

For the unaware, Tresorit is an 'end-to-end encrypted collaboration platform'. Without all of the technological mumbo-jumbo, think of Tresorit as a far-more secure version of Dropbox, with all of the collaborative tools for the team to get work done. But the best part is that you can use Tresorit's services from anywhere, ensuring that your team can work from home and that precious company information stays secure.

With all of your data and information flowing through Tresorit, there's the obvious concern as to whether your data is being hosted elsewhere. You can forget about those concerns, as Tresorit offers a "Zero-knowledge system". This means that your unencrypted data, encryption keys, and passwords are never stored or transmitted through Tresorit's servers.

Whenever a company or service makes a claim that it offers a certain amount of encryption, you likely want to see something to back that up. Well, the company has published its Security Evaluation Summary right on the home page. A third-party security company, EY Cybersecurity, provided the report, revealing that Tresorit delivers on its various promises to keep your data secure, without ever having unencrypted access to files or documents. And if you don't want to take the word of a single security evaluation, you can rest easy knowing that Tresorit is compliant with ISO27001, HIPAA, FINRA, and GDPR, covering all of the bases.

Tresorit as a service has a lot to offer, as you'll find quite a few different features and options packed into one place. Cloud storage is one of those things that cannot be discounted, and Tresorit provides up to 2TB of encrypted cloud storage per user. There's also a local file manager that can be installed on Windows or macOS, to securely transfer files from your computer to the cloud for sharing and collaboration.

But what about those times where you aren't at your computer and a request for a document comes through? Well, Tresorit also has mobile apps available for download from the Google Play Store and Apple's App Store. This makes it possible to use the app from wherever you are, regardless of what device you're using and without being concerned about potential security flaws.

Although Tresorit's primary focus is for businesses, the company also offers its services for individuals. There is a free plan to get you started, which provides 3GB of encrypted storage, along with a file-size allotment of up to 500MB. Going up from there, you have Tresorit Premium and Solo, both of which offer differing amounts of encrypted storage and file size limits.

Switching over to Tresorit for businesses, and we have a similar tiered approach. There three options to choose from, with each being billed on a per-user basis. Business Standard provides 1TB of encrypted cloud storage for each user, all of the collaboration features you could want, along with a maximum file size of 5GB. This gets bumped up to 15GB with Business Plus, while providing 2TB of encrypted cloud storage. Again, this is on a per-user basis, so you won't have to worry about the entire team bumping against potential cloud storage limits when working together.

Whether you're looking for a secure system to transfer encrypted files and use encrypted software, or if you're an IT professional looking to implement some new tools in the office, Tresorit is a great way to go. The company has solutions for every situation, all while ensuring that your files never end up in the wrong hands or on its servers.

In the US or UK and interested in trying out the services Tresorit offers? Enter below before June 6th for your chance to win a Tresorit Solo Annual Plan plus 25% off any renewal or upgrade costs. Full terms and conditions in the widget below. Good luck!

Enter for a chance to win a Tresorit Solo Annual Plan

If you're an iPhone or iPad user, and you receive mail from Outlook users who protect their messages with Microsoft's Outlook encryption, you'll want to download the company's free OME Viewer app for iOS.

Microsoft's OME message security features can only be enabled by Office 365 admins, so OME is not a feature the average consumer can use on their own. (Learn more about OME on Microsoft's website

However, if your organization uses OME, or you regularly receive encrypted messages on your iOS device from colleagues, the app, which is not new, can come in very handy. And it works along with a number of popular iOS mail apps, including Outlook for iOS, Apple's native iOS Mail app, Yahoo Mail and Google's Gmail app.

How to use Microsoft's OME Viewer app for iOS

Here's how to use the OME Viewer iPhone app alongside Outlook for iOS. If you use another email app, the process is very similar.

When you receive a message that's encrypted using OME, it will contain a secure attachment with the message's body text. To open and view that attachment using OME Viewer, follow this process:

1. Install the OME Viewer app for iOS, which is available for free in Apple's App Store.
2. Open an encrypted message using the Outlook for iOS app.
3. Click the attachment, which should be named something like message.html, to open a related options screen.
4. On the iOS option screen that appears, tap the upward-facing arrow in the upper-right corner.
5. Choose the Open in ... option at the bottom left of your display.

6. Select the Copy to OME Viewer option from the available actions in the middle of your screen.
7. When the OME Viewer app opens, tap Use a one-time password.
8. Return to your inbox, and then look for the new message with your password. (If you don't see the message, check your junk mail or other message folders to see if it landed there.)
9. Open the message, and then tap the passcode to open the OME Viewer app and read the encrypted message.

Note: If any of these steps stall or hang up during the process, simply close both your Outlook for iOS app and the OME Viewer app, relaunch them and try the steps again.

Microsoft's OME Viewer for iPhone and iPad is available for free on the Apple App Store.

Check out our Office 101 help hub for more related articles:

• Microsoft Office 101: Help, how-tos and tutorials

In the wake of the recent terrorist attacks in France, UK Prime Minister David Cameron has come out in support of banning encrypted messaging apps. According to a new report, Cameron alluded that he would be for banning encrypted communication apps, which could include WhatsApp, Snapchat, and Apple's iMessage.

From The Independent:

To justify such an action, Cameron was quoted by Ars Technica as saying the following:

This is just the latest in a much larger privacy battle that has been ramping up as smartphones have become more and more ubiquitous. Late last year, the NSA was accused of spying on citizens through the use of fake towers. A few days later, a bill that would have curbed the extent of NSA spying just barely fell short of passing the senate.

However, keep in mind that there's no telling if such a ban would actually be possible, but it would stand to impact a large swath of popular messaging apps in the UK if instituted.

Sources: The Independent, Ars Technica

Senator Ron Wyden has introduced a bill that would prohibit the U.S. government from mandating backdoor access into the smartphones and computers of Americans. The bill comes after the FBI engaged in a standoff with tech giants like Apple and Google over the use of encryption software on newer phones. Law enforcement officials cite public safety as a concern and claim that having backdoor access could help in criminal investigations.

Wyden cites privacy and civil liberties as the basis for his bill, stating that the best way to keep Americans' data safe is through strong encryption:

Wyden's Senate bill follows the House's similar effort in June to prohibit electronic vulnerability mandates in a 293-123 vote.

Source: Senator Wyden

Last month we told you guys about a beta for a Windows Phone app called Boxcryptor. It’s an app that a lot of folks concerned over privacy and protecting their data might want to look into. Most of us use services like OneDrive, Dropbox, Google Drive and Box to store and retrieve files in the cloud. Those services retain the right to search the content that you store on their services. Boxcryptor allows you to encrypt your data before storing it to the cloud. There’s been a Windows desktop app for quite some time, but we’re now getting a Windows Phone and Windows 8 app today. Let’s check it out.

Head into the Windows Phone Store or Windows Store and you’ll find Boxcryptor. Here’s what you can do with the apps:

• Supports most cloud storage providers like Dropbox, Google Drive or Microsoft OneDrive.
• Access your encrypted files (documents, photos, music, etc.) in your cloud anytime and have your sensitive files always with you
• Encryption and decryption is done directly on your device - your password is never transmitted
• Secure file encryption using the AES-256 standard
• Boxcryptor Unlimited users can also use filename encryption

Boxcryptor (www.boxcryptor.com) works with most major cloud storage providers like OneDrive, Google Drive, Dropbox, Box, SugarSync and many others. There are now apps available on Windows, Mac, Chrome, Android, iOS, BlackBerry, Windows 8 and Windows Phone.

Boxcryptor places a high priority on strong security, as they should. Which is why all private information is secured with a password only you have access to. They recommend creating a folder that you plan on placing encrypted data in. You can then set it up so that all files placed in this folder are automatically encrypted. You can also manually encrypt individual files that are in different folders.

Boxcryptor is an ideal solution to encrypting your data if you plan on storing them third-party services and servers. Early reviews of the platform are positive with a lot of happy users.

It’s free to use Boxcryptor and get access to basic features. There are two paid tiers, unlimited personal and unlimited business, that offer up additional features like unlimited providers, unlimited devices, filename encryption, commercial use and more. Check out their pricing page to see which tier is right for you.

Take Boxcryptor for a spin and download either the Windows Phone version or the Windows 8 version. Let us know what you think of it below!

While the release of Windows Vista was plagued with burden and its legacy was remembered as such, one excellent feature to rise out of the wreckage has served its way through Windows 7 up to current day Windows 8 operating systems. The feature that we are referring to is, of course, Microsoft’s BitLocker Drive Encryption – full disk encryption at the click of a button.

WARNING: Disk Encryption is a delicate process, please be sure to backup your data before beginning. WPCentral, Mobile Nations, Smartphone Experts are not responsible for any data loss caused by a failure to read instructions carefully or ignoring our recommendation to backup ALL of your data before beginning. Please be sure to read the entire article before beginning your encryption journey. If you have doubts about anything, please ask in the comments below before proceeding.

BitLocker Drive Encryption

The encryption software was originally only included within Ultimate and Enterprise editions of previous operating systems can now be found in the more affordable Windows 8 Pro variation. The system itself has the ability to full encrypt a disk with an AES algorithm.

The Advanced Encryption Standard (AES for short) was published by the United States National Institute of Standards and Technology in 2001. As of a 2013 cryptanalysis of the cipher, it was found that there are possibilities other than using a brute force attack to break into an AES encrypted system, but none of them are currently possible with present day computer systems.

The Pros and Cons

If you are looking to encrypt your Windows 8 Pro PC, you should probably consider a few notions before proceeding. To start, you should be aware that in the event of disk or operating system corruption, you are more likely to lose your data if the drive is encrypted. While a normally corrupted PC can be booted up into a Linux variant and the data recovered with software – encryption makes this task ever more difficult and sometimes impossible (despite having a recovery key, as we will discuss).

BackTrack is one of many Linux distros that can be used to break into a Windows file system

Another factor that makes encrypting your disk a bit less invaluable is cloud storage; the files that you are trying so much to protect on your PC are hovering in space, in an unencrypted system. Sure, many online data services vary and the one you use might be using encryption, but for the most part – they are not. If you are using Microsoft’s OneDrive service to keep your files updated and backed up, then you are storing your files in an unencrypted cloud. An excellent wiki article on OneDrive and data encryption (or the lack of it) can be found on Microsoft’s support site by clicking here.

Let us be realistic though, unless you are trying to protect your data from the government (which might be a reality these days), then you probably will not have to worry about someone hacking into Microsoft’s servers to steal your tax information. So let us leave that notion aside and note that you most likely simply want to protect your data from being accessed if your laptop or tablet is stolen.

Disk encryption is an excellent solution for preventing thieves from booting up your system with a side-loaded operating system to access your files. Encryption can provide a reliable and strong shield against the hacker looking to sniff your personal data.

Here, an offline registry editor is used to remove a user's password from their Windows account

If you have decided that you wish to give BitLocker encryption a go, then we are ready to proceed. We, of course, recommend that you first backup all of your data in the event disk corruption occurring during the procedure (in fact, you should be backing up your data anyway).

If your data is backed up and you are ready to begin, then simply follow the steps below to a happier and more encrypted system.

How to Encrypt Systems with TPM Chips

Microsoft’s BitLocker system was designed for use in conjunction with machines that have Trusted Platform Module chips installed within them. To simplify what the TPM chip does, it holds the keys needed to boot up and unlock the operating system.

If your PC now has a giant lock on it, then it only makes sense that a key will be needed to unlock it. A TPM chip holds an encryption system’s keys, so the system can be easily booted. If the drive is removed from the system (and thus separated from the TPM chip), it cannot be booted. In addition, if the system is booted with a side-loaded operating system, the TPM chip will not give the keys up for use.

Many business machines have TPM chips including Lenovo’s ThinkPad series, Dell’s Latitude series, Microsoft’s Surface Pro, and HP’s EliteBook series. If you do have a business machine with a TPM chip, then you can follow the instructions below; otherwise, skip to the next section to see how to encrypt a system without a TPM chip. If you are unsure whether or not your system has a TPM chip, then follow the steps below and see if you are addressed with an error.

Click on the above image to enlarge it.

1. To begin, please make sure that you are logged in as an administrator on your local machine.
2. Next, open “This PC” (recently known as “My PC” in previous versions of Windows.
3. With the “This PC” Explorer window open, you should be able to see a complete list of your devices and drives. Right click the drive you wish to encrypt (usually the ‘C’ drive).
4. Now select the “Turn on BitLocker Option”. If you have a system with a TPM chip, it may now prompt you to active the chip via a simple “TPM Security Hardware” wizard. If you do not have a TPM chip, you will now be presented with an error message stating that – if so, skip to the next section of this article.
5. After you have initialized your TPM chip (which may require a reboot), you can go ahead and begin to active BitLocker. During the process you will be given a recovery password to use in emergencies; you can choose to “save to your Microsoft account”, “save the password on a USB drive”, “save the password in a folder”, or “print the password”. We suggest choosing the Microsoft account option, so you will never be at risk of losing your recovery key. One your key has been saved, click “Next” to continue.
6. The next screen will ask if you wish “Encrypt used disk space only” or if you wish to “Encrypt entire drive” – we suggest going with the latter.
7. Once you have selected your recovery method and disk encryption amount you will be given one last chance to turn back. Ensure that the right drive is select, check the “Run BitLocker System Check” box and click continue to proceed. Note: Your PC may reboot during this process.
8. That is it! You should now see an “Encryption in Progress” status bar showing the competition status of the disk you are encryption. While the disk is encrypting itself, you will see a Drive Encryption icon in your taskbar – if any problems arise, you will be notified.
9. Once the encryption has completely finished, you can use your computer as normal – the system is now safe!

How to Encrypt Systems without TPM Chips

Unfortunately, not all PCs manufactured include built in TPM chips. If you are running a consumer notebook or Microsoft’s Surface 2 – then you will find an error message notifying you of the scenario; the error message may appear as follows:

For many people who are their own system administrators, this message can seem a bit daunting, but do not worry – if you really wish to encrypt your system with Microsoft’s BitLocker solution, we will help you out!

Click on the above image to enlarge it.

We will begin by changing a setting within the Group Policy Object Editor that will allow you to encrypt the system despite not having the (quite wonderful) TPM chip.

1. To begin, go to your Start Screen and type in “gpedit.msc”, and hit enter. Alternatively, you can press “WINDOWS KEY + R” to bring up a Run dialog and type in the command from there.
2. After typing the command, you will see the Local Group Policy Editor pop up in front of you.  The editor is split into two parts, on the left hand side you will see a list of folders (much like you would see in Windows explorer) and on the right side, you will see a Window that will display options available within the folder we have selected. NOTE: Please be sure to follow all instructions as making the wrong change can seriously affect your system. If you are unsure of something, please ask in the comments below.
3. On the right hand side of the editor, start by selecting the “Administrative Templates” option under “Computer Configuration”.
4. On the right hand side of the editor, you should now see a selection of folders – double click “Windows Components”, then double click “BitLocker Drive Encryption”, and finally double click “Operating System Drives”.
5. You will now see a list of items that appear to be files – these files are in fact settings that can be altered by a system administrator. Double click the item entitled “Require additional authentication at startup”. Note: There are two of these settings – do NOT click the one that includes “(Windows Server 2008 and Windows Vista)”.
6. A dialog box will now popup entitled, “Require additional authentication at startup”. Begin by selecting the bubble entitled “Enabled” (by default, “Not Configured” will be selected).
7. The options that were once grayed below should become available. Check the box that says “Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)”. Leave all other options as they are and hit “Apply” followed by “OK”. You can now close the policy editor window.

Okay, now that you have enabled Microsoft's BitLocker within Windows 8 Pro, it is time to start encrypting that system! Follow the steps below to continue and encrypt the system.

1. Open “This PC” (recently known as “My PC” in previous versions of Windows).
2. With the “This PC” Explorer window open, you should be able to see a complete list of your devices and drives. Right click the drive you wish to encrypt (usually the ‘C’ drive).
3. Now select the “Turn on BitLocker Option”. If you were previously met with an error before – that error should be gone now.
4. You will be prompted how you wish to unlock your drive upon booting it up. As the machine cannot store its key on a secure TPM chip, you will have to select another way to store it. Either you can use a USB flash drive by selecting “Insert a USB flash drive” or you can enter a password at boot by selecting “Enter a password”. In this example, we are going to select “Enter a password”. Note: If you choose the option to require a USB flash drive, you must have it on you at all times when you wish to boot the PC.
5. The system will now prompt you to enter a password to unlock the drive. Use a password that contains uppercase and lowercase letters, numbers, symbols, and spaces for the highest level of security. While you do not have to adhere to the suggestion, we suggest creating the strongest password you can come up with for BitLocker. Note: Be sure to remember your password – if you do not, then you will be unable to boot the system.
6. After you have entered your super secure password you will be given a recovery password to use in emergencies; you can choose to “save to your Microsoft account”, “save the password on a USB drive”, “save the password in a folder”, or “print the password”. We suggest choosing the Microsoft account option, so you will never be at risk of losing your recovery key. One your key has been saved, click “Next” to continue.
7. The next screen will ask if you wish “Encrypt used disk space only” or if you wish to “Encrypt entire drive” – we suggest going with the latter.
8. Once you have selected your recovery method and disk encryption amount you will be given one last chance to turn back. Ensure that the right drive is select, check the “Run BitLocker System Check” box and click continue to proceed. Note: Your PC may reboot during this process.
9. That is it! You should now see an “Encryption in Progress” status bar showing the competition status of the disk you are encryption. While the disk is encrypting itself, you will see a Drive Encryption icon in your taskbar – if any problems arise, you will be notified.
10. Once the encryption has completely finished, you can use your computer as normal – the system is now safe! Simply enter your password at startup (or plug in your flash drive) to boot the system.

Some Questions You May Have

• How do I disable BitLocker? Simple, right click on the encrypted drive in the “This PC” explorer window and select “Turn off BitLocker Drive Encryption”, then select “Disable BitLocker Drive Encryption” from the dialog box that appears.
• I forgot my password, how can I access my machine? Boot up your encrypted machine and the “BitLocker Drive encryption Recovery Console” will appear. From here, use the method that you selected above to access your recovery key and access the system.
• If I am using an external backup drive, should I continue using it? If you backup your data to the unencrypted drive, then you might as well never have encrypted your drive. We suggest either keeping the backup drive in a safe unless it is needed or using BitLocker to encrypt your external drive.
• How do I change the encryption type of BitLocker? Use the Group Policy Editor as before, but this time select the “Choose drive encryption method and cipher strength”. From there you can select exact type of encryption you wish to use.
• What about TrueCrypt? The encryption solution, TrueCrypt, is a great alternative to Microsoft’s Bitlocker, and you can check it out by visiting their site here. We choose to use BitLocker as our encryption method for two reasons: It is the official solution provided by Microsoft and it is easily integrated into the Windows operating system.
• I have addition questions, what can I do? You can start by performing a Bing search to see if your question has already been been answered. Alternatively, you can comment below, ask in our Windows 8 forum, or send me a personal question via Twitter (@Marcham93).

We hope you enjoyed this article on encrypting your personal data. Securing your drive and information is the first step towards a more secure future. Remember though, if you take your files outside of the system by placing them on an unencrypted backup, unsecured cloud service, or unencrypted USB flash drive – you are not safe.

DISCLAIMER: Like all security systems - if there is a will, there is a way to break in. While BitLocker is an extremely secure method of protecting your data, there are possible exploits (as with all systems) that might allow an experienced hacker to access the system; you can read more about those exploits by clicking here.

Do you encrypt your personal drive – do you use Microsoft’s BitLocker solution?

Back in November, we reported on Telegram, a new WhatsApp-like messenger service that is available on iOS and Android. Hailing from Russia and created the founders of VKontakte, Telegram (www.telegram.org) is a decentralized, cloud-based and encrypted messaging service that promises to be the fastest and most secure out there (it supports RSA 2048 encryption and Diffie–Hellman secure key exchange).

At the time, we reported that the client should be ready by January but as the month winds down, we still don’t have a client on our phone. The official Twitter account for Telegram has now confirmed their schedule, and while they are a little behind, we should have something tangible in the coming weeks.

As you can see, having it both Windows Phone 7 and 8 is the goal here, so this app will stand a chance of more widespread adoption. Back in November, a contest was announced to create the app, as reported by WP7Forum.ru and evidently, that competition is nearing a close.

On iOS, Telegram maintains a fairly high rating with 4.5 stars out of 5 with a lot of positive feedback. Will it be as successful on Windows Phone and will your friends and family use this instead of WhatsApp? It’s hard to say, but we’re excited to give it a spin.

Source: Twitter; via WP7Forum.ru

Many people have had their trust shaken by the United States National Security Agency’s involvement with top technology companies around the globe including Google, Apple, Facebook, Microsoft, and many more. To this day, many people still feel at least a bit of lost faith towards the aforementioned technology giants and any personal data that they may hold.

The paranoia can be seen in Microsoft’s release of the Xbox One and its Kinect accessory – there was a vocal, but visible, minority that screamed the Kinect could be used by the NSA for spying purposes. But recently, Microsoft has announced major plans to increase encryption techniques on their own internet traffic to keep users more secure.

With reports of the National Security Agency’s project MUSCULAR snooping into the private networks of Google and Yahoo, Microsoft feels that one line of defense that they can provide is increased encryption. Microsoft isn’t the only one trying to combat the NSA’s snooping with an increased in security, they will be joining the ranks of Google, Yahoo, and Facebook, who have already done so.

A few officials from within the United States government have released statements. While the official statement from the NSA tells us not worry, other anonymous US officials have told us to be concerned.

A spokesperson from the NSA responded to Microsoft’s actions by stating:

An anonymous US official (a source of the Washington Post), stated that “the collection [of data] can be done at various points and does not necessarily happen on a company’s private fiber-optic links”. In other words, you can beef up your defenses, but the NSA will always find a way to get the data they need.

Microsoft’s general counsel, Smith, stated that the latest shareholder meetings put an emphasis and focus on creating a stronger and more secure network for the company.

While those familiar with Microsoft’s plans going forward are uncomfortable speaking without the condition of anonymity, the Wall Street Journal was able to confirm that there have been “high-level” meetings within the company to discuss stronger encryption “across the full range of consumer and business services”.

Major corporations are gearing up to protect their data, along with their users. Microsoft, Google, Yahoo, Apple, Facebook, and AOL, have called for limiting the NSA’s ability to view and snoop into private data.

Microsoft has not been at the forefront of security, but the company intends to turn those intentions around with the latest bits of news and documents provided by Snowden on exactly how far the NSA’s grasp goes.

Do you feel secure when using Microsoft products – what is your view on the future of your personal data’s security in the cloud?

Source: The Washington Post

Software piracy is a serious battle, which can also affect our beloved platform developers. Microsoft has taken action by automatically applying encryption to all apps through the newly unveiled Dev Center. According to a detailed post on the Windows Phone Developer Blog, Todd Brix states that all apps (including those already submitted) are automatically encrypted without user input.

We first heard about the possibility of server-side encryption back in November, 2011. From our understanding, Microsoft was waiting until everyone was on Mango to implement that feature and it now looks to have happened. If you recall, at the end of April Microsoft decreed that you had to have Windows Phone 7.5 to get to the Marketplace. Combined with the Dev Center refresh, we think that transition for encryption is now complete.

The software giant has been cracking down on Windows Phone app piracy by making it harder for devices to be unlocked and removing the Marketplace from Zune PC software. This would surely slow down those who desire to steal work and make it freely available, but we're hoping this app encryption will help strengthen the blockade against attacks.

It will be warmly welcomed by developers who have poured not only funds and resources, but time and effort into their projects. This will in-turn benefit consumers with more apps being released through more potential sales carried out and a stronger ROI for content providers. Here's hoping anyway.

Source: Windows Phone Developer Blog; via: Windows Phone Daily

Though Windows Phone 7 is primarily aimed at consumers during the initial launch, Microsoft already has a strong focus on enterprise built within the the OS (Office, Sharepoint, Skydrive, remote management, etc.). This enterprise focus will no doubt become even more robust during further revisions to the OS, hopefully giving Microsoft that edge once again over RIM.

One area that is of interest would be security and encryption. Turns out WP7 supports quite a few forms of data protection algorithms, including the following:

• AES
• HMACSHA1
• HMACSHA256
• Rfc2898DeriveBytes
• SHA1
• SHA256

This doesn't mean that encryption is directly supported out-of-the-box for end users, but it does mean that developers have a wide assortment of tools to handle data encryption when writing their own software for the platform. Rob Tiffiany demonstrates this by writing an app to encode some simple data on the fly. His impression is that WP7 has a very solid base for security, which to bring it around again, is not only is good for business but for corporate environments. 

In keeping with our theme of looking at open-source software for Windows Mobile, we now focus on KeePass PPC. KeePass is similar to other open source projects in that it originally was intended for desktop operating systems and has since been ported to handheld platforms.

Similar to several applications that are commercially available, KeePass stores sensitive information such as usernames and passwords or bank account numbers. The concept is great: The portability of your Windows Mobile device paired with the data security offered by some of the most secure encryption algorithms publicly available.

Keep reading for more.

Concept

The concept is brilliant. Using one master password, you can encrypt and save all kinds of data that is difficult to remember without leaving it vulnerable to anyone who might find your device lying around.

Functionality

Using your master password, KeePass builds a database to contain your data. For additional security, you can use a key file to add an additional layer of security. KeePass allows you to create groups and subgroups to organize and categorize your data.

KeePass PPC uses the same encryption algorithms that are used by the desktop version. AES (Advanced Encryption Standard, a symmetrical key algorithm) is used to encrypt your database, while SHA-256 (Secure Hashing Algorithm, 256 bit, a Hashing Algorithm) is used to hash your password. Both algorithms are industry standards and are largely considered to be secure.

As with any password, you should use a strong password. Best practice dictates that you should use at least one of each character type (uppercase letter, lowercase letter, number and special character). This will make it tougher to guess your password as well as help protect it from a brute-force attack.

Stability

I didn’t experience any issues with stability or performance in my tests. From a purely development standpoint it’s not a complicated piece of software. In this case, simple is good. As with any software, keep an eye out for software updates.

On the subject of updates, KeyPass SD is the next step in development for KeyPass on Windows Mobile. KeePass PPC is compatible with version 1.14 of the desktop version, while KeePass SD is compatible with version 2.06. Keypass SD is in the Alpha stage of development. Both versions are available for touch screenversions of Windows Mobile, while only KeePass SD is available for Windows Mobile Standard.

Conclusion

KeePass presents a straightforward solution to a common problem. Using industry standard security, your sensitive data will be secure. If you keep any kind of personal data, like Social Security Numbers or bank account information on your Windows Mobile device, consider KeePass as an alternative to some of the commercial options that are available.