How can I password protect my hard-drive completely?

Question

I have a password for my Windows OS, so if my computer is stolen (hopefully) the thief will not be able to start up the operating system. But one can easily remove the hard drive and access the files as external drive.

How can I prevent this?

Solution

Hard Drive Encryption

Without rehashing this too much you have two potentially free choices with any modern Windows OS.

Bitlocker

Look through the Bitlocker Technet information and verify you meet the requirements:

Windows 7 Ultimate, Windows 7 Enterprise, or Windows Server 2008 R2 noteNote BitLocker is an optional feature of Windows Server 2008 R2. Use Server Manager to install BitLocker on a computer running Windows Server 2008 R2.

Trucrypt

A popular free alternative

Key features include:

• Creates a virtual encrypted disk within a file and mounts it as a real disk.
• Encrypts an entire partition or storage device such as USB flash drive or hard drive.
• Encrypts a partition or drive where Windows is installed (pre-boot authentication).

Comments

[Ramhound]

I would use Bitlocker or TrueCrypt to fully encrypt your data.

[Ramhound]

@Kwaio - I don't know if I would say it is "easy" to brute force a secure User Windows Profile password. Most people who steal a laptop could careless about the data on it let alone have the skills to access the the stored password information in the Hive.

[sgtbeano]

Which version of Windows are you on?

[Koray Tugay]

@sgtbeano Windows 7 Home Premium

[sgtbeano]

As your per your comment, here's a technet article on Bitlocker for Windows 7 - technet.microsoft.com/en-us/library/cc766295(v=WS.10).aspx

[Mark]

bare in mind of course that bios passwords can also be reset.

[sgtbeano]

I'd agree with @Mark, it's pretty trivial to bypass a bios password.

[sinni800]

Truecrypt is the best (FREE!) method. Bitlocker has pitfalls like TPMs (which not everyone has)

[Austin T French]

@sinni800 Best is subjective. I see no reason Bitlocker isn't just as good most of the time, and it requires TPM as well. Plus, with Bitlocker you can rely on support from Microsoft if you really need it or somethings goes way off the charts.

[Austin T French]

@Mark but not a Hard Drive password in the BIOS! Either way, a poor alternative to encryption.

[sinni800]

With all the stuff happening nowadays, people trust Bitlocker less and less... NSA backdoors and the like. But I know this is not the place for conspiracy theories. I find TrueCrypt a lot more comfy when you don't have a TPM, as Bitlocker makes things harder for you without one.