All Collections
Troubleshooting
How to enable disk encryption (for Mac, Windows 10, Linux, and Android)?
How to enable disk encryption (for Mac, Windows 10, Linux, and Android)?
Barracuda Admin avatar
Written by Barracuda Admin
Updated over a week ago

Set up disk encryption for additional security and prevent unauthorized access.

Enable FileVault Encryption on Mac

FileVault 2 is available in OS X Lion or later. When FileVault is turned on, your Mac always requires you to log in with your account password.

  1. Choose the Apple menu, System Preferences, then click Security & Privacy.

  2. Click the FileVault tab.

  3. Click on the lock icon and then enter an administrator name and password.

  4. Click Turn On FileVault.


Enable disk encryption on Windows 10

  1. Sign in to Windows with an administrator account (you may have to sign out and back in to switch accounts). For more info, see Create a local or administrator account in Windows 10.

  2. Select the Start button, then select Settings > Update & Security > Device encryption. If Device encryption doesn't appear, it isn't available. You may be able to use standard BitLocker encryption instead. Open Device encryption setting.

  3. If device encryption is turned off, select Turn on.

  4. Turn on standard BitLocker encryption.

  5. Sign in to your Windows device with an administrator account (you may have to sign out and back in to switch accounts). For more info, see Create a local or administrator account in Windows 10.

  6. In the search box on the taskbar, type Manage BitLocker and then select it from the list of results. Or you can select the Start button, and then under Windows System, select Control Panel. In Control Panel, select System and Security, and then under BitLocker Drive Encryption, select Manage BitLocker. Note: You'll only see this option if BitLocker is available for your device. It isn't available on Windows 10 Home edition.

  7. Select Turn on BitLocker and then follow the instructions.


Enable disk encryption in Linux

Disk Encryption During System Installation

Linux has built-in disk encryption known as LUKS (Linux Unified Key Setup). Unfortunately, there aren't any good ways to add encryption to an existing system without reinstalling everything. We recommend making a copy of your /home directory (and possibly /etc, if you've altered your system configuration significantly) onto an external disk or another computer, reinstalling Linux, enabling encryption during the installation, copying your data back onto the system, and wiping the external disk (unless it was also encrypted).

The methods for enabling encryption vary with each Linux distribution. We do not have the resources to support all of them, but we have some guidance on several of the more popular distributions at the time of this document's writing.

Ubuntu 18.04 LTS

  1. In the "Installation type" screen, make sure you have checked "Encrypt the new Ubuntu installation for security".

  2. On the next screen, enter your disk passphrase and check "Overwrite empty disk space".

  3. When you create an account, you do not need to check "Encrypt my home folder".

Debian 9 (stretch)

  1. In the "Partition disks" screen, select "Guided - use entire disk and set up encrypted LVM". If you prefer to use manual partitioning, create your boot and main partitions, use the main partition as an encryption partition, use the new encrypted device as an LVM physical volume, and proceed from there as usual.

Fedora 29, RHEL 7, CentOS 7

(As of April 2019, the latest Fedora, RHEL, and CentOS releases all work the same with respect to disk encryption.)

  1. Go into the "Installation Destination" section of the installer. Under "Other Storage Options", check the box next to "Encrypt my data".

  2. OpenSUSE Tumbleweed.

  3. On the "Suggested Partitioning" screen, click the "Edit Proposal Settings" button. Check both "Create LVM-based Proposal" and "Encrypt Volume Group".


Enable disk encryption on Android

  1. Set a password on your Android and remember it. If you forget, you'll need a full and complete factory wipe of all user data to get back into your system. Think of this as your master key β€” keep it private and don't use the same password you would use anywhere else.

  2. To begin the encryption process, charge your device.

  3. Open Settings on your Android and under "Security" tap on Encryption.

  4. Start the encryption process when your device is fully charged and keep it plugged in until it's finished.

  5. When everything is done, your phone will reboot and you'll be required to enter your passphrase to get things started.

Did this answer your question?