The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Encryption program for Mac

subediisubedii Registered User regular
edited October 2007 in Help / Advice Forum
Making use of a Mac that a few people use. I've been storing things like financial records and other misclaneous bits and bobs, but now that other people sometimes use it, I wanted a way to encrypt them without too much hassle. I can't say I know too much about Open Source or freeware applications for Mac, or encryption programs either, so I'd find any suggestions helpful.

I'm not expecting something crazy that would take upwards of 2 millenia to crack or something, just something simple enough that will deter people from seeing how much I'm earning / spending etc.

Barring that I'd have to keep them all on a flash drive, but I'd prefer to keep them on my Mac if possible.

So, any recommended programmes? Ease of use would be pretty helpful as well.

subedii on

Posts

  • saggiosaggio Registered User regular
    edited October 2007
    GnuPG. There are a variety of frontends for it, like Seahorse or Kgpg.

    It's exactly what you are looking for.

    saggio on
    3DS: 0232-9436-6893
  • thej3wthej3w Registered User regular
    edited October 2007
    The mac has it's own encryption program built in. If you open up the Disk Utility, and create a New Image. You can set the image to be encrypted, as well as the size of the image. After it creates it, you mount it like any other DMG. (Double click) and drag your files to it. Un-mount it when you're done.

    thej3w on
    J4ku.png
  • Legoman05Legoman05 Registered User regular
    edited October 2007
    You could also use filevault to encrypt your home directory. This makes it so that people have to be logged in to your account to see your home directory - and since you always lock your screen, that's not a problem, right?

    Just use finder on filevault - you'll find it. It's under security in system preferences.

    Legoman05 on
  • subediisubedii Registered User regular
    edited October 2007
    Thanks for the suggestions. I tried using the GPG encryption thing but couldn't quite figure out how to use it to encrypt files (I installed the base files and the drag and drop interface, but when I tried to encrypt something it kept cropping up with an empty window saying "recipients" or something similar.


    I've been stupid, I'll just use separate user accounts and passwords. There's no way for them to access my documents then right? As long as they don't know my PW I should be OK, and they don't have admin access, so is there anything else I need to take care of, or is that enough to keep my personal files?

    subedii on
  • FristleFristle Registered User regular
    edited October 2007
    subedii wrote: »
    Thanks for the suggestions. I tried using the GPG encryption thing but couldn't quite figure out how to use it to encrypt files (I installed the base files and the drag and drop interface, but when I tried to encrypt something it kept cropping up with an empty window saying "recipients" or something similar.

    I've been stupid, I'll just use separate user accounts and passwords. There's no way for them to access my documents then right? As long as they don't know my PW I should be OK, and they don't have admin access, so is there anything else I need to take care of, or is that enough to keep my personal files?

    Operating-system enforced access control only works if your hypothetical party does not have physical access to the computer. If they do, even for five minutes, they can boot to a CD/USB/Firewire device running the OS of their choice, and read all the files on the system. You can mitigate that risk by turning on the EFI lock, which forbids booting the system from anything other than the hard disk. It still won't stop someone who is motivated to open the system with a screwdriver.

    My suggestion is to just turn on FileVault (System Preference, Security), or else use encrypted disk images (very easy to create using Disk Utility, as a previous person suggested). If Disk Utility is too much hassle though, you can make it easier with this $29 program called Knox: http://www.knoxformac.com/

    Is your situation such that you're sharing a user account with someone else but yet plan to hide data from them? Definitely create separate accounts -- even if you do plan on using encryption. However if you are the only one intending to use your account, you don't need separate accounts for your separate security needs. Just use one account and choose an encryption method that works.

    Fristle on
    Fristle.jpg
  • CKyleCKyle Registered User regular
    edited October 2007
    subedii wrote: »
    Thanks for the suggestions. I tried using the GPG encryption thing but couldn't quite figure out how to use it to encrypt files (I installed the base files and the drag and drop interface, but when I tried to encrypt something it kept cropping up with an empty window saying "recipients" or something similar.


    I've been stupid, I'll just use separate user accounts and passwords. There's no way for them to access my documents then right? As long as they don't know my PW I should be OK, and they don't have admin access, so is there anything else I need to take care of, or is that enough to keep my personal files?

    If you're just going to use separate accounts as your protection keep be careful. As the last message suggests, somebody can boot to another OS and read the files from there, or if somebody is using another account then the permissions may be set up to allow reading from any account. (I'm not sure, but the default may be to allow universal read access.)

    You can use separate accounts safely if you turn on File Vault, though.

    CKyle on
Sign In or Register to comment.