Folder Encryption (beta)

An encrypted folder is a folder that encrypts files when it is written to, and, decrypts files when reading from. The default encryption method employed is AES 128, and files are encrypted/decrypted in transit, meaning that the calling application's file buffer is encrypted before written to disk. In the case of reading, the buffer is decrypted before being handed back to the calling application.

The passphrase is ONLY KNOWN TO THE USER, we do not store the passphrase (unless you are using the autokey feature). IF YOU FORGET THE PASSPHRASE, YOUR FILES ARE UNRECOVERABLE. FYI - We will be offering managed passphrases in future releases.

Rule name - Name of the rule

Encrypted folder - This is the folder that will automatically encrypt/decrypt files.

Passphrase - This is the string of characters (password) that is used to encrypt and decrypt the file stream.

Auto-key location(s) (optional) - The location(s) to create the Auto-key (for details on Auto-keys, see below) with the file system, this can include any paths that can be accessed by Anvil, including removable drives and network endpoints.

What is an Auto-key, and how should it be used?

An Auto-key is a file that contains the authentication details for a given encrypted folder and is used to automatically encrypt and decrypt files without user intervention. You could, for example, have an encrypted folder on your computer and place an Auto-key file on a USB drive, and, providing that USB drive is plugged in, any files in the encrypted folder would automatically be encrypted and decryption as required. Another example would be to place the Auto-key file on a network drive so files are automatically encrypted and decrypted, providing the machine has access to the specific network endpoint.

Note - Keeping the Auto-key file on the same drive as the encrypted folder defeats the purpose of the encrypted folder.

What is the Windows Explorer option?

When selected, Anvil will automatically insert the Windows Explorer process into the allowed applications list. This will enable Windows Explorer to automatically decrypt files being moved or copied out of the target folder and encrypt files being moved or copied into the target folder.

Note - The passphrase must still be provided before Windows Explorer can access the files.