BestCrypt Volume Encryption allows the user to manage passwords for encrypted volumes in several ways. Every encrypted volume has Master Password - it is the password the user enters when he/she encrypts the volume. The user can change the Master Password.
Besides of Master Password, the user can add several other passwords for encrypted volume, including boot and system volumes. Such additional passwords can be removed at any time. The functionality is convenient and provides more security, because administrator can add passwords for other users to get temporary access to encrypted data and then remove the passwords. Besides, administrator does not have to tell other users his/her own password, because it can also be used for other encrypted data.
To add new password select the volume in main window of BestCrypt Volume Encryption and run Volume->Manage Passwords->Add Password command.
To remove additional password select the volume and run Volume->Manage Passwords->Remove Additional Password command. Note that the program requires to enter the password to remove it.
Administrator can also remove all additional passwords by running Volume->Manage Passwords->Remove all Additional Passwords command. In this case the program requires to enter Master Password for the encrypted volume.
To change password select the volume and run Volume->Manage Passwords->Change Master Password or Volume->Manage Passwords->Change Additional Password command if you want to change additional password.
The software will ask to enter current password for the volume. After entering a proper password BestCrypt Volume Encryption will ask to enter new password twice to verify that the user has not mistyped some letter in the new password.
If encryption key for the volume is stored on SafeNet eToken USB device, password for the volume actually is password for the eToken. If you decide to change the password, you should realize that new password for the eToken must be entered in other applications that use the eToken device.
To change passphrase for SafeNet eToken device, use SafeNet eToken management software the computer must have installed, like eToken PKI Client or eToken RTE.
Since eToken devices support one only password, administrator cannot add new passwords for the encrypted volume using Add Password command. Instead, administrator can copy encryption key stored on the eToken to eToken of the other user. The other user's eToken has another password, so all the users will open the same encrypted volume by entering different passwords for their different eTokens.