---

Data Storage Safety

2024-07-17 00:03:54
Specifically for Windows and Linux computers.

• Use BitLocker Drive Encryption on all hard drives (including secondary), or LUKS for Linux.
• For very significant/sensitive data that cannot risked being stolen, use a VeraCrypt container on an encrypted hard drive.
• This ensures there's a secondary layer of encryption with a different password to unlock it. This also makes it so that it can't be leaked to CLOUD BACKUP SERVICES which have a tendency to be a dangerously unlooked vector.
• Ensure you use a backup service that supports native encryption using private keys you control (iDrive is the best).
• This is a secondary layer in case your username/password -> Authenticator is compromised. Additionally, ensure that the backup service does not save the private keys themselves.
• One negative of iDrive is the terrible Linux support. I recommend running a QEMU/KVM VM that runs the windows version of the program, then sharing your desired locations to backup to the VM. I have a note on this here.
• If you aren't using a backup service already, you're NGMI...
• Use an encrypted notepad program, such as encNotepad -> never use plaintext notes for anything.
• (I'm not here to plug my basic software, but encNotepad is a basic notepad-like program to get you up and running, and with high-enough security methods)

---

Check out these notes...

---