Windows 7: Encrypt hard disk with TrueCrypt

If you want to encrypt your hard drive under Windows 7, the free program TrueCrypt is available. We'll show you how it works.

Step 1: Install TrueCrypt in German

If TrueCrypt is already installed on your system in German, you can skip this step.

1. Download TrueCrypt from our CHIP download area and run the EXE file. Just click through the installation program.
2. Then start the tool. Click on "Settings" in the menu bar at the top and select the "Language" option (see screenshot).
3. Select "German" and click "OK". The user interface now appears in German.

Step 2: Start hard disk encryption with TrueCrypt

1. Click on "System" in the menu bar at the top and select the option "Encrypt system partition / drive" (see picture). Then a small window opens.
2. Select "Normal" as the encryption method and go to "Next".
3. You now have to choose between the options "Encrypt the Windows system partition" and "Encrypt entire drive".
4. If you are not a security fanatic, just encrypt the Windows partition. However, for maximum security of your data, you should encrypt the entire drive.

Step 3: Select encryption method

1. You must now choose an encryption method. If you are not familiar with the subject, we advise you to use the "AES" method. This is secure and is used by US authorities, among others. "Serpent-Towfish-AES" is the most secure, but also the slowest type of encryption.
2. Then set a password for the system partition. Take a really secure password here. Use large and small letters, numbers and special characters. Don't use words found in a dictionary. Most importantly, the longer the safer.
3. TrueCrypt now generates random data for improved encryption. While the numbers and letters fly through the display image, you should move your mouse back and forth across the screen. This helps the program to improve encryption.
4. The master and header keys are then displayed. However, you do not have to pay any further attention to this.

Step 4: create Windows 7 rescue CD

In the next step you will be asked to create a rescue CD. So you can start your system even if Windows or the TrueCrypt boot loader are broken.

• First, choose a location for the CD image. Click "Next", it will be created there.
• You must save the image in a safe place. Use either a USB stick, an external hard drive or a CD.
• If you don't know how this works, or if you don't have a suitable program installed, you can find instructions on how to burn the ISO file with the free CDBurnerXP.

Step 5: Complete encryption with TrueCrypt under Windows 7

You will now be offered "secure deletion" of your hard disk. The process can take a long time because the system partition is copied for a short time, the storage location is overwritten and the partition is reinserted. If you reject the secure deletion, professionals can bypass the encryption.

1. Opt for "secure deletion" or skip the process with the "None" option.
2. Then click the "Test" button and Windows will restart. After entering your password correctly, the system partition is ready to be encrypted.
3. If you click the "Encrypt" button, the process starts. Depending on how full your hard drive is, the process can take several hours.
4. When the process is complete, you will receive a message that the execution was successful.

By the way: With TrueCrypt you can also encrypt your Dropbox storage.