TrueCrypt security announcement
Information Services have been informed of potential security problems with TrueCrypt software.
The official TrueCrypt website has been modified and the version of TrueCrypt available has been updated to 7.2.
You must NOT download or attempt to use TrueCrypt 7.2.
We need time to verify the claims made on the TrueCrypt website and recent news on the Internet. In the meantime we have carried out a risk assessment and our advice is as follows:
We are continuing to investigate and looking at alternatives in the long term and will provide further information as soon as possible.
If you require any further information please contact the IS Service Desk:
Telephone: (0131) 455 3000
* You can find out what version of TrueCrypt you are using by going to Help > About in the TrueCrypt software. The previous version, 7.1a, was available from 2012 - May 27th 2014
Data Encryption Frequently Asked Questions
What is data encryption?
Why do I need to encrypt data?
How do I download TrueCrypt?
How do I use TrueCrypt?
Can I encrypt emails?
Q: What is data encryption?
A: The encryption of data renders it unreadable to anyone except for the intended reader.
Q: Why do I need to encrypt data?
A: Any data that is to moved from Edinburgh Napier University premises and is of a sensitive or confidential nature must be encrypted as stated in the Information Security Policy.
Data held on portable devices could be at risk from loss or theft, e.g. laptops, notebook computers, USB drives, removable disks and any other devices. Edinburgh Napier University has made the data encryption tool - TrueCrypt and the relevant documentation available to staff.
Q: What's TrueCrypt?
A: TrueCrypt is Open Source software, it can be used on a variety of Operating Systems. As well as Operating System drive encryption it offers encryption of Folders and external devices such as USB Flash Drives.
Q: How do I download TrueCrypt?
A: You can download TrueCrypt by logging in to the Software Download Service.
Before downloading the software you must read the Installation Guide.
Q: How do I use TrueCrypt?
A: The user guides will explain how to use the software:
How to set up an encrypted volume on a hard disk using TrueCrypt
How to encrypt a USB drive using TrueCrypt
Before using TrueCrypt you should be aware of the following:
- There is NO password recovery facility within TrueCrypt. If a password is forgotten or lost it will NOT be possible to unencrypt the data.
- TrueCrypt requires administrator privileges to install, but not to use.
- TrueCrypt requires a password to access encrypted volumes, hard disks and devices.
- Never encrypt the master copy of any data, encrypt a copy transferred to a laptop or device such as a USB drive or removable disk.
- If at all possible do not take sensitive data off-site. Use a secure VPN connection to the Edinburgh Napier University network to access centrally held data rather than take this data off-site.
Q: Can I encrypt emails?
A: Within Edinburgh Napier University we also offer Email Encryption software for staff to use.