You want to protect your information, but some information you really want to protect. With Encrypting File System (EFS) in Windows 7 Professional, you can store selected information on your hard drive in an encrypted format, using industry-standard encryption algorithms and modern ciphers to protect files against unauthorized access even from those who gain physical access to the hard disk or the computer. Here are five things you should know about encryption and EFS:
- It's built in. EFS builds strong data encryption into the operating system, removing the need for add-on technology or additional hardware. "It's a quick and powerful way to add an extra layer of protection to your critical files and folders," says IT consultant Ryan Telzlaff.
- Protect the important stuff first. Rather than encrypt an entire drive, EFS encrypts personal files and folders one-by-one. Because encrypting files and folders is easy, you might be tempted to encrypt all of your information, but experts suggest that you should encrypt files or folders when you think it's important that they have the strongest protection that Windows 7 Professional can provide, such as financial or customer records.
- It takes only one click. You can control who sees a file or folder by simply selecting a check box in the file or folder's properties. When you close the check-marked file, it's automatically encrypted and it's ready to use the next time you open the file. If you decide you no longer need to encrypt the file or folder, just clear the checkbox.
- Back up your key. When you encrypt a file or folder, an encryption certificate is created, which is linked to an encryption key that, in combination, verifies your identity when you want to access the information. It's a good idea to back up the key and certificate in a safe place other than on your computer, such as a DVD.
- Encryption can be shared. Other people who want access to files or folders that you encrypt need their own EFS certificate added to the files. With this certificate, they can access the encrypted files or folders when they are working on your computer. If the files are shared, they can access them from another computer running Windows. "It's important to remember that the encrypted files will only be accessible on computers that have certificates for users who are listed as having access to the file or the recovery agent key," says Ken Summers, a Los Angeles IT consultant who specializes in small businesses. "If you are using an encrypted file at work and want to use it on your home computer, you can only access the file if your home computer has your user certificate as well."
