Description: This article contains some of the most frequently asked questions about Drive Encryption from Summer 2019.

Q: What is Drive Encryption?
A: Simply put, Drive Encryption, also referred to as Disk Encryption or File Encryption, is a process that takes your computer files and makes them into a format that cannot be read easily by others who are not authorized to read them. Software or hardware creates a lock and key type of situation where the files can only be read by someone or something with the authorized key.

Q: Do I have to have my drive encrypted?
A: No, but many companies that deal with sensitive information, such as financial medical or government data, may have polices that require it. Encryption is a good idea for anyone who holds anyone’s personal information. Otherwise, encryption may not be worth the effort or necessary to use.

Q: Why Should I encrypt my drive?
A: Encryption is a way to secure data to prevent other people from accessing it. This is especially helpful if there is a security breach. Also, it protects personal information that can be used for malicious purposes if malware gets onto the computer.

Q: How does encryption protect my data?
A: Encryption scrambles data in a way that makes it unreadable without the correct encryption key. Currently, encryption is one of the most popular and effective data security methods used by organizations.

Q: What are Encryption Keys?
A: Encryption keys are random strings of characters used to scramble and unscramble data. Encryption keys are designed with algorithms intended to ensure that every key is unpredictable and unique.

Q: Are Encryptions any more secure than a password?
A: Yes, Encryption keys typically use RSA Algorithms that are more complex than a normal password. With password protection it wouldd be like putting a padlock on a box with the information inside. If you broke the box up, you could have the information even without breaking the padlock. Encryption is a mathematical process where the information becomes nonsense to people who cannot decrypt it.

Q: What is TPM?
A: TPM is an acronym for Trusted Platform Module. A TPM is a specialized chip in computers used to store encryption keys.

Q: Do you need a TPM to use encryption?
A: No - some programs can store the encryption keys on another device like a flash drive. Many encryption software does require a TPM chip, so make sure to understand the requirements before buying the program.

Q: How do I encrypt my drive?
A: Many options are available including software options such as BitLocker and hardware options such as TouchID fingerprint scanners on smartphones. To use BitLocker, search for Control Panel in Cortana. Open System and Security, then BitLocker Drive Encryption. Turn on BitLocker. Enter the desired password. Follow the prompts and once the computer is restarted, it will ask for the password.

Q: What is BitLocker?
A: BitLocker is a built-in Windows feature that encrypts data on the hard drive. By default, BitLocker is turned off. It can only be enabled through the Windows control panel. BitLocker is not available on Windows Home editions.

Q: Where can I find my BitLocker Recovery Key?
A: Microsoft Support provides information on retrieving your BitLocker Recovery Key.

Q: What happens if I do not have my security key but am not using BitLocker?
A: The data will remain encrypted - it is extremely difficult to recover and access files that have been encrypted. Micro Center is not able to access data from encrypted drives. Recovering data from encrypted drives, if possible, is a very expensive process.

Q: Software or Hardware encryption - which is the best option?
A: Both options provide security to the data stored, however software options typically are less expensive and rely on a password, while Hardware options typically are more expensive and use other methods of authentication such as a fingerprint, or other biometrics.

Q: Can I just encrypt certain files instead of the whole drive?
A: Yes, some programs do give the option for encrypting a selection of files, but it is less secure than a full drive encryption. For BitLocker, in Windows Explorer, right click on the file or folder you wish to encrypt. From the context menu select Properties. Choose Advanced. In the Advanced Attributes dialogue box, under Compress or Encrypt Attributes, check Encrypt contents to secure data. Choose Apply and OK.

Q: Can encrypted data be recovered from a failed drive?
A: Yes, however you still need the recovery key or the original encryption keys to unscramble the data. Otherwise, it is nearly impossible and can be very expensive.