Encrypt Files On Mac OS X

Most people store some kind of data on their computer that they don't want other people to see or use. Whether it is financial information, confidential files for work or files you shouldn't have in the first place, it is often hard to guarantee that no one has seen them. If your computer was stolen, for example, you would hope that the thief would just wipe the hard drive, but there is no way to be sure. Leaving your Mac logged on in the office or at home also allows other people to gain access to your private data.

Encryption

The easiest and most secure way to protect your files is an encrypted folder. This means that a password is needed to access the files within it, and the files won't show up in Spotlight searches. Moreover, it is almost impossible to decrypt the data without that password, even with data recovery tools.

Mac OS X comes with FileVault, which you can turn on from the System Preferences. However, this really is overkill as it encrypts your entire user folder, including your music, photos and files that really don't need to be protected.


A much better option is to use Disk Utility (located in Applications/Utilities) to create an encrypted disk image. This is just like a normal disk image (downloaded software often comes in one), but to mount it on your desktop you need to provide the correct password.

To create an encrypted disk image, open up Disk Utility, go to the File menu and choose New - Blank Disk Image. In the dialog box that appears choose a name for your disk image and where you want to save it. The size is a maximum that the disk image can hold, so the preset sizes for CDs and DVDs are useful for if you want to burn the contents when it gets full. Choose AES-128 encryption and sparse disk image from the Format drop down menu.


Now when you click Create, you will be prompted to enter your password. To really protect your data, don't choose a password that you use for everything else or something that is easily guess-able. Press the key button next to the password field to open the Password Assistant. This will help you choose a password that is both easy to remember and hard to crack. The best type to choose from the menu is "Memorable" as the others are a bit more complicated. Obviously longer passwords are more secure, but you have to find the right balance. If you don't like the password that the assistant suggests, press the down arrow next to the password to see a list of other suggestions. Alternatively, type in your own password and it will tell you how good it is and give tips on how to improve it.



Remember to deselect the "Remember Password" option before pressing OK, as that would really defeat the point of creating the disk image in the first place. Now your encrypted disk image will be located in where you chose to save it. When you double-click it you will be prompted for the password, then it will mount on your desktop and also appear in the Sidebar of every window.


Hiding

For some people there is no need to encrypt data. For a quick, temporary solution you can just hide away your files on your Mac. This is much less secure and far from foolproof, but quite often it is as much as you need.

Probably the best place to put your files is in the Library folder. The main benefits of this are that it isn't searched by Spotlight, and that there are hundreds of other files in there already. The Application Support folder in you Library is a good place, as there are all sorts of random files in there. You might also want to rename your file if it has a name that stands out ( super-secret-file.doc for example).

Related Articles