Encryption Instructions

ICPSR requires that removable storage devices must be encrypted if they are used to store IDARS data. This page provides guidance for encrypting removable storage using currently supported Mac and Windows operating systems.

Encrypt a removable drive with BitLocker

Available: Windows 10 Professional and Enterprise Editions
Unavailable: Windows Home Edition

How to encrypt removable storage

  • Attach the storage device to your computer
  • Launch Bitlocker by entering the term bitlocker in the search bar on the taskbar.
  • Select Manage BitLocker from the list of search results on the left-hand pane. Alternatively click the Open icon in the right-hand pane.
  • In the BitLocker Drive Encryption window select the removable storage device that you want to encrypt and click the Turn on BitLocker button for that drive.
  • A new window will prompt you to select the method to be used to unlock the removable drive, once encrypted. Select Use a [password to unlock the drive. Enter the password twice. Store your password securely.
  • When prompted, select a location to store a backup of your recovery key.
  • When prompted, select the option to encrypt the entire drive.
  • Continue to follow the prompts to encrypt the removable storage device
  • When the encryption is done, select Close.

Once encrypted, File Explorer will add a lock icon to the storage device icon to indicate that the device is encrypted. To access files on the encrypted device you will be required to provide the password that was created when you encrypted the device.

Access a removable drive encrypted by BitLocker

Available: Windows 10 Professional and Enterprise Editions
Unavailable: Windows Home Edition

When you connect a Bitlocker encrypted removable storage device to a computer running Windows 10, the operating system will notify you that the drive is BitLocker-protected. Use that notification to unlock the drive. If you opt to ignore the prompt and wish to unlock the drive later, follow these steps:

  • Open File Explorer and select This PC from the left-hand folder tree pane.
  • From the device list in the right-hand pane, double-click the removable storage device.
  • When prompted, enter the password to unlock the drive. And select the Unlock button.
  • Double-click the removable drive in File Explorer to view its contents.

Encrypt a removable drive with MacOS

Reference:        https://support.apple.com/en-ca/guide/mac-help/mh40593/mac

When you format a removable storage device, you can encrypt and protect it with a password. You must enter that  password when you connect the device to your computer.

Using the Encrypt tool

The Encrypt tool encrypts the storage device and preserves any files already stored on the device.

WARNING: When you encrypt media, the disk format is converted to the APFS format and then encrypted. Macs with older versions of macOS that don’t support the APFS format will not be able to read the device’s data. Consider whether you need to connect the media to a Mac with an older version of macOS before you encrypt the data. You can also update your other Mac to the latest version of the macOS that supports the APFS format.

  1. In the Finder  on your Mac, open a window, then Control-click the item you want to encrypt in the sidebar.
  2. Choose Encrypt [item name] from the shortcut menu.
  3. Create a password for the disk and click Encrypt Disk.
    Important: Be sure to record and keep this password in a safe place. You cannot access the data on the encrypted disk without it.
  4. It may take some time to encrypt, depending on how much information is stored on your Mac. However, you can use your Mac as usual while the disk is being encrypted.

To decrypt an encrypted disk, Control-click the disk you want to decrypt, then choose Decrypt [item name] from the shortcut menu.

Encrypt a removable drive with VeraCrypt

Available: veracrypt Downloads
Unavailable: Windows Home Edition

VeraCrypt is an alternative for those using Windows Home edition who cannot use Bitlocker.

How to Encrypt a Removable Storage Device

  • Attach the storage device to your computer. Make a note of the drive letter that is assigned to this device:
  • Launch VeraCrypt
  • From the menu, select Volumes | Create New Volume . . .
  • Choose Encrypt a non-system partition/drive
  • Select Standard VeraCrypt volume
  • Select the device
  • Select the encryption option:
    • Create encrypted volume and format it is the fastest method. This method will erase the device contents. Be sure to copy any content to another storage location prior to using this method.
    • Encrypt partition in place is the slower option because it encrypts data in place.
  • Accept encryption algorithm default: AES; accept hash algorithm default: SHA-512
  • Accept the volume size
  • Enter a password and confirm it
  • Select whether you will be storing large files of more than 4GB. This setting determines how the drive is formatted.
  • Move your mouse randomly don't stop until the Randomness bar is fully green
  • Wait for the encryption procedure to complete
  • Exit the application once the process is complete

Note that after the encryption process has completed, Windows may report that the device is damaged and may prompt you to format the drive. Ignore the warning. Do not format the drive.

Opening the Encrypted Removable Storage Device

  • Attach the storage device to your computer. Ignore any message from the operating system indicating that the device needs to be formatted. The operating system cannot recognize the device because it has been encrypted.
  • Open VeraCrypt
  • Select the removable device
  • Select the Mount button
  • Enter the password to decrypt the device

Dismount the Encrypted Removable Storage Device

If you no longer need to use the drive, select it from the list and click on the ?Dismount? button. This will finish any last minute encryption and unmount the drive.