{"id":32404,"date":"2017-07-03T17:42:36","date_gmt":"2017-07-03T21:42:36","guid":{"rendered":"http:\/\/www.opensource.im\/uncategorized\/you-need-to-encrypt-all-your-data-this-is-how-its-done-tnw.php"},"modified":"2017-07-03T17:42:36","modified_gmt":"2017-07-03T21:42:36","slug":"you-need-to-encrypt-all-your-data-this-is-how-its-done-tnw","status":"publish","type":"post","link":"https:\/\/euvolution.com\/open-source-convergence\/encryption\/you-need-to-encrypt-all-your-data-this-is-how-its-done-tnw.php","title":{"rendered":"You need to encrypt all your data. This is how it&#8217;s done &#8211; TNW"},"content":{"rendered":"<p><p>    The increasing amount of data were all generating is    everywhere: in smartphones, laptops, thumb drives, and dozens    of online services. How can we secure all of them against    unwarranted access?  <\/p>\n<p>    We virtually cant.  <\/p>\n<p>    Smartphones get stolen, thumb drives get lost, email passwords    get brute-forced, cloud servers get breached, unwary users get    phished, WiFi    networks get tapped, and eventually, malicious users obtain    access to your data.  <\/p>\n<p>    So how do you protect your data against unwelcome parties?       <\/p>\n<p>    You encrypt it. In case you dont know it, encryption is the    science of modifying data to prevent intruders from making    sense of it. When you encrypt your data, only you and anyone    else holding the decryption keys will be able to unlock and    read it. This means that even if an attacker gains access to    your data by breaking into a server or stealing your hard    drive, they wont be able to make sense of it if they dont    have the keys.  <\/p>\n<p>    As Ive argued before, encryption is your last line of defense,    the one thing that can protect your data when all else goes    wrong.  <\/p>\n<p>    So without further ado, heres are some of the key ways you can    encrypt the data that youre scattering everywhere.  <\/p>\n<\/p>\n<p>    Email has become a de facto medium for exchanges of all sorts.    We use email to send business secrets, financial data, personal    data and various kinds of sensitive information. There are few    things that are as damaging as a hacked    email account.  <\/p>\n<p>    You should obviously do everything you can to protect your    email accounts, such as choosing strong passwords or enabling    two-factor authentication. But in case your account does get    breached, you have a few viable options to encrypt your    messages and prevent hackers from actually seeing the contents    of your messages.  <\/p>\n<p>    One is the use of Pretty Good Privacy    (PGP), a tool that adds a layer of encryption to your    emails. Basically, PGP generates a public and private    encryption key and ties it to your email address. You publish    the public key for everyone to see and keep the private key to    yourself.  <\/p>\n<p>    Anyone who wants to send you a confidential message will    encrypt it with your public key before sending it to you. Only    your private key will be able to decrypt the message, and as    long as you keep it safe, you can rest assured that only you    will be able to read those messages. This means that even the    owner of the server where your emails are stored wont be able    to read them.  <\/p>\n<p>    There are a handful of free PGP tools such as Mailvelope, which work with all major    webmail clients such as Gmail and Hotmail, and will get    you started with encryption in a couple of easy steps.  <\/p>\n<p>    Of course, if you want your outgoing messages to be encrypted    as well, the recipient needs to have a PGP key too, so youll    have to convince your friends to set up PGP accounts.  <\/p>\n<p>    An alternative to PGP is using an end-to-end encrypted mail    service such as ProtonMail or LavaBit. End-to-end encryption makes    sure that anything that gets stored in your account is only    viewable by you, the person who holds the key. No surveillance or    massive databreach    will give access to the content of your emails.  <\/p>\n<\/p>\n<p>    The same threats that can out your emails apply to the files    you store in cloud services such as Google Drive and    Dropbox. Even the biggest    services you entrust    with your files can get hacked, and the sensitive files    youve stored in the cloud can fall into the wrong hands.  <\/p>\n<p>    The most basic choice is to protect your files with a    compression tool that supports encryption and password    protection features, like zip, before storing them in your    cloud server.  <\/p>\n<p>    In case you find it too cumbersome to manually encrypt and    decrypt your files, you can use tools such as Boxcryptor or Whisply, which    integrate with most popular cloud services and add an    easy-to-use layer of encryption.  <\/p>\n<p>    Another alternative is to use an encrypted storage service such    as SpiderOak One,    Tresorit or Cryptobox, which have end-to-end    encryption incorporated into their service. This means only    you and whomever you share your files with will have access to    the contents.  <\/p>\n<p>    Messaging apps are perhaps the most popular applications we use    on our phones. But theyre not all equally    secure. Some applications will encrypt your messages in    transition, but not in storage, which means your data can    become exposed in case of data breaches or compromised    accounts.  <\/p>\n<p>    The most secure messaging apps are those that have end-to-end    encryption features, making messages exclusively visible to the    parties taking part in a conversation. Weve discussed how to    evaluate messaging apps in terms of security here on The Next    Web before.  <\/p>\n<\/p>\n<p>    Some of the viable options include Open Whisper Systems Signal, WhatsApp and Wickr, which are    end-to-end encrypted by default. Telegram and Facebook Messenger also have end-to-end    encryption, though youll have to enable them manually.  <\/p>\n<p>    You might also want check out this interesting    project by two Canadian students, who are working to add    strong encryption to a variety of web communication tools.  <\/p>\n<p>    While you consider the security of your online data, you    shouldnt forget about the devices you physically own. Your    phone, laptop, memory cards and flash drives hold quite a lot    of sensitive information.  <\/p>\n<p>    Your smartphone in particular is very vulnerable. It has a lot    of functionality, it holds your communication apps and    sensitive information and pictures, among others. And you carry    it everywhere with you, which means theres a greater chance    you might lose it or get it stolen from you.  <\/p>\n<p>    Fortunately, most desktop and mobile operating systems support    full-disk    encryption, a feature that will encrypt everything on your    phone, computer or flash drive. By enabling full-disk    encryption, youll protect your on-device data against physical    theft. Good encryption cant be circumvented, even by     device manufacturers or government agenciesat least not    without spending a huge bunch of    money.  <\/p>\n<p>    Credit:    Juan Buis \/ TNW  <\/p>\n<p>    In iOS version 8 and later,    device encryption is turned on by default if your device has a    passcode. Newer Android devices also come with    device encryption enabled out of the box, but with the variety    of devices available out there, you might want to verify to make sure    yours is encrypted.  <\/p>\n<p>    For your laptops and removable media, depending on which    operating system you have, there are always good encryption    tools available. Windows has BitLocker, which    can easily encrypt your hard drives or removable storage in a    few easy clicks. The Mac OS has a native encryption tool as well, called    FileVault.  <\/p>\n<p>    Hackers have many ways to steal your information on the fly,    especially if youre    using a public WiFi network. In fact, your internet service    provider too     might be interested in having a look at your internet    traffic.  <\/p>\n<p>    Adding a layer of encryption to your internet traffic will make    sure you enjoy full privacy while surfing the web. One of your    viable options is to use a Virtual Private Network (VPN). VPN    services encrypt all your traffic and redirect them through    their own servers. All eavesdroppers will be able to see is a    bunch on encrypted data being exchanged between you and your    VPN service.  <\/p>\n<p>    VPN services are available for both mobile devices and desktop    computers.  <\/p>\n<\/p>\n<p>    To be fair,     VPN is not a perfect solution. Your VPN provider will have    full visibility over your non-HTTPS traffic. Free VPN services    in particular have a tendency to use customer data for    commercial purposes. But its much safer than letting hackers    scrutinize your traffic.  <\/p>\n<p>    Encryption is not a complete security solution and it doesnt    obviate the need for basic security    measures such as keeping your operating system and software    up to date with the latest security patches. And dont forget    that encryption is only as secure as you make it, which means    you have to keep your keys secure.  <\/p>\n<p>    But encryption is definitely one of your best friends in the    hostile world of digital information, connected devices and    online services. Encrypt your data, and stay safe out there.  <\/p>\n<p>    Read next:     8 reasons why Berlin will outpace London as Europes Silicon    Valley  <\/p>\n<p><!-- Auto Generated --><\/p>\n<p>Originally posted here:<br \/>\n<a target=\"_blank\" href=\"https:\/\/thenextweb.com\/contributors\/2017\/07\/03\/encrypt-data-email-files-hard-drive\/\" title=\"You need to encrypt all your data. This is how it's done - TNW\">You need to encrypt all your data. This is how it's done - TNW<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> The increasing amount of data were all generating is everywhere: in smartphones, laptops, thumb drives, and dozens of online services. How can we secure all of them against unwarranted access? <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45],"tags":[],"class_list":["post-32404","post","type-post","status-publish","format-standard","hentry","category-encryption"],"_links":{"self":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/32404"}],"collection":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/comments?post=32404"}],"version-history":[{"count":0,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/32404\/revisions"}],"wp:attachment":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/media?parent=32404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/categories?post=32404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/tags?post=32404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}