Introduction
BestCrypt Volume Encryption software provides transparent encryption of all the data stored on fixed and removable disks.
Nearly all information in the modern world exists in electronic form, or as data. The growing number of high-profile data breaches (i.e., incidents in which personal and public records, confidential information and intellectual property are leaked, lost or stolen) have created an urgent need for data protection solutions.
No information security strategy can be effective unless data is properly protected at the source, where it is stored. Data encryption is the most effective way to ensure the confidentiality of all sensitive data, eliminating the risks of data loss and data theft.
Volume Encryption software works with volume as with a single portion of data. Volume is always in one of two definite states: if password is not entered, the whole volume is not accessible. If user enters proper password and opens the volume, all data on the volume become accessible.
BestCrypt Volume Encryption software provides the following capabilities:
- Encrypt volumes residing on fixed and removable disks.
- Support for CoreStorage and APFS logical volumes, including Fusion drives.
- Choose from four encryption algorithms known as strong algorithms. Every algorithm is implemented with the largest possible key size defined in the algorithm's specification.
- XTS Encryption Mode is used with all encryption algorithms. XTS Mode is specially designed for applications working on disk sector level and more secure than other popular modes used earlier (like Cipher Block Chaining (CBC) mode) and faster than LRW mode.
- Computer Pre-Boot Authentication if system volume is encrypted. It means that BestCrypt Volume Encryption is loaded before operating system and allows computer to boot only after entering a proper password.
- Rescue function allowing the user to decrypt volumes if the system cannot be loaded.
- Managing passwords - user can change password, add another password, remove additional password.
BestCrypt for Mac requires the following minimum computer configuration:
- Intel-based Mac
- Mac OS X version 10.9 and higher
- 10 MB of free hard disk space
There are the following software limitations:
- On old Mac computers without security T2 chip, the software cannot encrypt volumes that are encrypted with FileVault. You have to Turn Off the FileVault first.
- Changing the encryption password for the system volume on computers with T2 security chip must be done by changing the user account password in System Preferences.
- The encryption prevents the operating system from upgrading transparently. You have to decrypt the system volume first.
See also:
Encryption Standards.
User Interface
Using BestCrypt Volume Encryption