With power-on passwords and login passwords available, what's the value of hard drive encryption?

With power-on passwords and login passwords available, what's the value of hard drive encryption?

Anyone who's determined to gain access to a drive is going to be able to bypass BIOS passwords or Windows passwords in just a couple of minutes. There are tools available to actually automate the process in both areas. I've written about it, and there's some pretty extensive resources available about bypassing BIOS passwords and how to crack operating system passwords.

    Requires Free Membership to View

    Login

    When you register for SearchStorage.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Our goal is to keep you informed on the hottest topics, the latest news and the biggest challenges you face as a storage professional today.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchStorage.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchStorage.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Storage security information
Compression, deduplication and encryption: What's the difference?

Mobile device security in six simple steps

Five must-have storage security testing tools
The fact is most people don't use power-on passwords anyway, because it's just too inconvenient. Many of the computers I see don't even have passwords to log on to the local operating system or into the network. And, if they do, all it takes is using a tool, such as the free Ophcrack LiveCD, and literally within a matter of minutes passwords can be cracked or reset and the hacker has full access to the system and the drive. There are even ways to access large storage environments by breaking into management consoles, gaining access to servers using Metasploit, etc.

So, to answer your question, storage encryption is the final layer of protection when all of these other things have failed.

Check out the entire Storage Encryption FAQ guide.


This was first published in October 2007

Back to top