Understanding data encryption.

Data Encryption is a security process where data is scrambled during transmission and can only be read by the receiving end upon having an appropriate encryption key. What an encryption key does is that it generates a sequence of symbols and characters in order to scramble or unscramble data that has been transmitted or stored. This process is done in order to enhance security of the data being sent or stored so that it can only be read by the intended destination.

Windows has an encryption feature known as Encrypting File System (EFS). This feature allows you to store information on your computer in an encrypted form. You will need this feature if you want to have strong protection from unwanted access to your data. Let’s see how we can encrypt files on our computer:

· Right click the folder you want to encrypt

· Click properties

· Select General Tab

· Click Advanced

· Select Encrypt Contents to secure data by placing a check mark.

· Click OK

You should remember to back up your encryption certificate if this is the first time you are encrypting a file or folder or you will lose the folder you are trying to encrypt. To do this, you must be logged on as an administrator. It is strongly recommended that you back up the certificate to any removable media. In the next topic we will tackle issues on how to back up encryption certificates and how to recover encryption certificates.

The reverse of file encryption is decryption which is a process of unscrambling the sent or encrypted data. Here is how you go about it:

· Right click the folder you want to decrypt

· Click Properties

· Click General Tab

· Click Advanced Tab

· Clear the check mark on Encrypt contents to secure data box

· Click Ok

Unfortunately, EFS is not fully supported on Windows Vista Starter, Windows Vista Home Basic, and Windows Vista Home Premium. However, this feature can only be done using the command prompt by advanced users only. Don’t gamble if you are a newbie to command prompt.