Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to keep my personal documents in cloud e.g. Dropbox. But I want some of my documents be encryted and password protected, such that: 1. even if my Dropbox gets hacked, those documents still have one more security 2. I can still access the documents from another computer when needed

I looked about and found truecrypt and encrypting while compressing. Are there other easier methods?

share|improve this question

GPG offers symetric encryption of single files which can be integrated with most file managers.

Ususally this works in some way where you right click on a file and select "encrypt" from a context menu. This is common with dolphin and nautilus and there is probably some solution to do this in windows explorer as well.

Alternatively there are encryption layers for file systems. In GNU/Linux for example you could use fuse encfs, to have a folder encrypted. You can set up your dropbox client to only sync the encrypted folder while working on the mounted unencripted representation.

Even easier: encfs offers a reverse view: you can take an unencrypted folder and mount it to folder which then contains a virtual, encrypted representation of the files. Have this crypto view synced via dropbox and you wouldn't even change your workflow.

share|improve this answer

Self promotion warning

I have written a python application that aims to encrypt documents client-side before uploading it onto Dropbox. It works in a very similar fashion to the official Dropbox app where you can simply drag and drop stuff into a folder and it will sync seamlessly. It's still in a very early phase so there might be bugs though, so do take that into account.

There are a few other applications that claim to offer client-side encryption for Dropbox, such as Boxcryptor. I have not used the software though, so I don't really know how it works or if it's secure.

share|improve this answer

Here's an article that describes 5 different ways to do cloud encryption of data:

http://www.makeuseof.com/tag/5-ways-to-securely-encrypt-your-files-in-the-cloud/

It provides additional links to each of the ways mentioned.

share|improve this answer
    
Hello, welcome to Information Security Stackexchange. Could you provide more information, perhaps even a summary of the article? Link-only answers are discouraged because they usually lead to link-rot. – Terry Chia Oct 20 '13 at 4:45

There's some tools offering transparent encryption, i.e. encryption is running in the background and you don't notice it in your daily workflow.

There's VeraCrypt, which is great for using it locally. In a cloud environment, it has some usage problems, see here. Namely, it can cause re-uploading all your files even if you only changed some few, and it can cause nasty synchronization conflicts when you don't wait for it finishing synchronization before you edit your files on other computers.

A tool I used to encrypt my Dropbox for quite some time is EncFS. Although it encrypts files individually (and does not hide directory structure or file sizes), it's a great tool and does the job. Unfortunately, there has been a security audit showing that EncFS is insecure when used together with cloud storage, see here for a detailed explanation.

There is a relatively new tool that was designed specifically to be used for encrypting cloud storage. It's called CryFS. Disclaimer: I'm one of the developers. It encrypts file contents as well as directory structure, metadata and file sizes (see here for why this is a good idea). It follows established security standards and there is a scientific thesis proving its security, see here.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.