Double Encryption possible but is it more secure ?

Hi,

I just tried encrypting a Partition twice using two methods & it did so with no problem but is it really more secure ?

I used "Folder Lock" software to create a container & put the entire partition data in it.

Then I encrypted that partition using Windows BitLocker with a different password & it it all went smooth.

Then I tried to decrypt both of them to make sure that I do get all my data back & I did.

Thus this was a case of encrypting an encrypted container which made me think, is it more secure if I used two different password for each encryption ?

Need opinions please.

Thanks

 

The effectiveness of double encryption of the file system, what you are talking about, is a matter of some debate. However at a minimum two different passphrases would be called for. A single passphrase means if one is compromised, both are...

A good read on what encrypted file systems are doing for you is at:

http://technet.microsoft.com/en-us/library/cc700811.aspx

Also, for file system encryption a good free solution for many is TrueCrypt.
May be worth a look...

A better approach, IMO, is to encrypt the files as well. PGP is very strong when used with a good passphrase. With this method, mere access to the machine is not enough, as the files themselves are encrypted, something file sytem encryption doesn't do.

 

I am little confused, because I thought I already encrypted files ( In my case folders with files in them ) with " Folder Lock ".

Then I encrypted all those folders which were in a Partition with BitLocker.

So I essentially encrypted files plus folders they were in & the whole partition with everything in them.

So what am I missing ?

 

Folder Lock is creating a directory that is password protected. And be advised:

http://www.pcworld.com/article/262097/lock_down_your_files_with_folder_lock_7.html
Also, while the lockers are perfectly secure, be aware that the hidden files and folders are hidden only while Folder Lock is running. You may access them freely by simply booting from CD such as Ubuntu Live or Parted Magic.

The other issue is that these programs are creating and encrypting volumes, not the actual files. Real *file* encryption would involve something like PGP...