Main Features

BestCrypt Volume Encryption software provides the following advanced functionality:

1. Encrypting all types of volumes residing on fixed and removable disks:

I. Simple volume, i.e. volume consisting of one disk partition.
II. Mount point - volume mounted as a sub-folder on NTFS-formatted volume.
III. Multipartition volume, i.e. volume consisting of several disk partitions:

a. Spanned volumes;
b. Mirrored volumes;
c. Striped volumes;
d. RAID-5 volumes.

2. BestCrypt Volume Encryption allows encrypting data with many encryption algorithms known as strong algorithms. Every algorithm is implemented with the largest possible key size defined in the algorithm's specification:

AES (Rijndael) - 256-bit key.
RC6 - 256-bit key.
Serpent - 256-bit key.
Twofish - 256-bit key.

3. BestCrypt Volume Encryption utilizes XTS Encryption Mode with all encryption algorithms listed above. XTS Mode is specially designed for applications working on disk sector level and more secure than other popular modes used earlier (like Cipher Block Chaining (CBC) mode) and faster than LRW mode.

4. After installation BestCrypt Volume Encryption can encrypt volumes where Windows boots from, as well as the volume where Windows stores its system files (including Registry, Page file and Hibernate file). Initial encryption is transparent both for running applications and for Windows system modules. Initial encryption can be paused and the user can continue the process at any time, for example after turning off/on the computer.

5. BestCrypt Volume Encryption performs Computer Pre-Boot Authentication if system or boot volume / partition is encrypted. It means that BestCrypt Volume Encryption loads before operating system and allows computer to boot only after entering a proper password.

6. BestCrypt Volume Encryption provides an easy way to customize Pre-Boot Authentication texts that appear when the user is required to enter password. The feature allows both to provide any additional hints when the user should enter a password and even hide the fact that pre-boot authentication process is running.

7. BestCrypt Volume Encryption supports hardware tokens Aladdin eToken R2 and PRO as a secure hardware storage for encryption keys. With hardware token the user gets two levels of protection for encrypted data, because in addition to password it is necessary to connect small hardware token where encryption key is stored.

8. BestCrypt Volume Encryption provides Secure Hibernating. If the user encrypts volume where Windows stores Hibernate File, BestCrypt Volume Encryption encrypts all write operations when Windows goes into Hibernate state and decrypts read operations when the computer wakes up from Hibernate state. Since pre-boot authentication is necessary at wake-up time, only the user who knows the proper password (and has hardware token, if used) can run computer from Hibernate mode. Secure Hibernating is a functionality that must be implemented in such software as BestCrypt Volume Encryption, otherwise all data written at Hibernate time (together with encryption keys) appears on disk in opened decrypted form.

9. As well as Hibernate File, BestCrypt Volume Encryption encrypts Windows Crash Dump Files. Windows writes files in a very special way, because when a crash occurs, regular disk write operations cannot be used. Without encrypting Crash Dump Files the security level of the software were significantly lower, because the files can store a snapshot of memory together with encryption keys on disk in opened decrypted form.

10. BestCrypt Volume Encryption supports a number of rescue functions allowing the user to decrypt volumes if a serious disk crash occurs.

BestCrypt Volume Encryption suggests the user should save a rescue file to reliable disk (removable disk, for instance). The security level of a rescue file itself is not lower than that of encrypted volumes, so the user should care only about physical reliability of the media where he/she saves the file. Note that without a proper password (and hardware token, if used) no one can use rescue file to decrypt volumes.
Rescue file can be used on any computer where you install an encrypted and damaged hard drive and where BestCrypt Volume Encryption is installed.
BestCrypt Volume Encryption advises and reminds the user to run a simple one-step procedure to prepare a bootable floppy disk or CD image with rescue file - in case the user encrypts boot / system volume. Such a bootable disk can be used if an accidental damage occurs to such volume and the problem of booting the computer arises.
Since hardware tokens usually look as small plastic things, they can be lost. BestCrypt Volume Encryption offers an easy way to make a backup copy of keys stored on one token to another token. It is recommended to store the backup token in a safe place.