Simple, free method for improving data security, privacy, encryption.
Sensitive data such as NDA customer data must be protected, secured, encrypted. These instructions specify free, open source, simple data security and encryption methods. Most computers and all of their users unsecured or unencrypted data is accessible by anyone with physical access to the computer and with a 'Live CD' or a bootable linux disk or drive. Hackers may also access networked computers if the system's security has been compromised, the encryption methods specified here will also protect data from such hackers.
PROCESS: Access to computer systems must be protected with accounts requiring a login and a strong 12 characters password including numbers, symbols, capital letters and lower-case letters. Sensitive files, data and metadata [such as filenames, extension, dates] must be encrypted, the simplest method is to add the files, data, metadata to a .7z file which compress and encrypts the files' content-data and the files' metadata.
Install 7-zip [it is free, open source, auditable]. Archive, encrypt the data as follows:
In Linux in command line mode: 7z a -p -mhe=on Directory.7z /path/to/directory
In Windows GUI mode:
start menu, programs find the 7-Zip folder, click on 7-Zip File Manager.
go to the address bar, type in or navigate to the directory.
select the files requiring compression and encryption, click on the green plus sign in the upper left.
name the compressed file.
choose the location of the archive file.
password protect the archive file created by 7-Zip, choose password in the text box beneath “Encryption.”
to encrypt the metadata as well (If you do not want people to see the names of the files in the archive) before entering the password check off the check box “Encrypt file names.” click OK.
The new archive file will be created in the chosen directory. users double clicking on the file, will be prompted for the password.
do not email encrypted files with the password in the title or body of the email
