16

There were similar question like How to secure a laptop against thieves.

But my question is different

I have family images, documents, some personal videos, etc (aound 500 GB).

I have backups. So even if my laptop were stolen I can get all my data.

But my data should not go to others. I have currently set a Windows password... But a thief can boot my laptop via Linux and then can access the files.

So what can I do to protect my data even if my laptop is stolen?

psmears
  • 549

2 Answers2

39

Encrypt you hard disk.

On Windows you can do it using Bit Locker and on Linux there is also a native tool to encrypt the hard disk.

jcbermu
  • 17,822
4

In addition to encrypting the hard disk (which should be the primary answer), you can also minimize exposure by relying more on resources stored elsewhere. Use cloud storage, or connect to a VPN for files stored at your workplace, rather than saving them directly on the device. A remote desktop services environment is also very good for this.

This reduced data loss exposure from device theft is one reason (among several) businesses have been so willing to move to cloud environments. I also know of at least one large business that is transitioning to Chromebooks for this reason. They still have a primarily Windows environment where the Chromebooks just connect to RDS for everything. Suddenly a lost device is much less of a big deal for them; it's only $200 to replace the device and there's no significant data breach risk.

You can also get remote management tools for laptops that will do lockouts and even encrypt or destroy data after the fact, but these are much less robust. It's too easy to just remove a hard drive from a laptop and plug it in as a guest in a different system. Then the lockout tool never runs and you can exfiltrate whatever data you want.

Joel Coehoorn
  • 28,637