What is your experience/case in organizing encryption of personal important data on your PC?

Question

Encryption

Guys .. Who set up encryption on a PC, their data.
0)Keepass is understandable (well, or alternatives). The question is,
1) what is the best way to encrypt TrueCryptom 7.1a (VeraCrypt, DyskCryptor) a completely hard disk or is it better to make containers? Considering that also
a) you need to organize regular backups, and the data backup policy is different, something needs to be backed up every day, and something once a week, a month.
b) If you need to use it sometimes on someone else's computer.
c) Maybe upload it to the cloud
d) backups of the main system to an external hard drive, fully encrypt it?
Who bothered and how are you organized?
UPD Thank you all. I came up with this option. While the main OS is Windows,
1 ) Macrium Reflect OS backups with a password. And everything to an external hard
2) Important documents, files in a TrueCrypt container, which is in a folder with synchronization to the cloud
folder
4) Passwords in Keepass
5) If I finally switch to Linux, TimeShift will be added.
profit!)

Answer 1

Trucrypt with a Gost encryption module - its decryption programs simply do not recognize it :) Under one topic - one container. Encrypted containers can be backed up as you like, even to the cloud, for complete paranoids - double encryption - let's say the container is archived with a password of 30 characters.
All passwords are added to another container, the password from which is learned by heart.
Of course, it is important to remember two things:
- It is relatively safe, at least at the household level (remember about thermorectal cryptanalysis!), but terribly inconvenient.
- If you forgot the password from the container - that's it. No data. Although if there is free capacity - you can try to sbrute. But then again - if the bruter understands the Gost module.

Answer 2

VeraCrypt -> Container -> Cloud -> Synchronization

Answer 3

Windows has bitlocker. Truecrypt can be used, but after some time it will stop working, most likely, given that Windows is being updated, and the API changes with Windows versions. Veracrypt - for home data it is quite possible to use it, for serious data requiring protection, I would not - Veracrypt, as far as I remember, was not really audited, unlike Truecrypt.
Backup systems usually have the ability to encrypt backups. So it is not necessary to store them on an encrypted storage, it is enough to encrypt the backup itself. In principle, even archivers can encrypt. WinRAR encryption, for example, is quite strong.

Answer 4

In Linux Mint, during installation, you can set encryption for the desired (or all) partitions.
In the latest version (19th), we added the TimeShift backup program, which conveniently works on the principle of the macro Time Machine, that is, you have a minimum of actions, just specify what to copy, what not, and where (you can use an external screw). If the partition is encrypted, then it will be automatically encrypted in the backup as well.

Answer 5

I tried all of the above at one time, there was one program that compresses zip or 7z on schedule and puts it in the specified place under a password. It was possible to transfer everything compressed to the cloud and to a USB flash drive and on another computer without problems with the presence of a password to view and use.
Everything else, especially VeraCrypt, DyskCryptor, etc., is very bloody and not practical.
Yes, I also use keepass and have not seen a more suitable and more convenient software, I set it up so that, for any sneeze, all passwords are filled in everywhere. Even in ftp managers, the convenience of the program is that you yourself do what you want, and not because in most you can either save the password or enter it, but if you need to save the password not from "login + password", but "login + login2 + password" here begs the phrase "this is my authority all ©"

Answer 6

1. Rohos Disk with container located in "C:\Users\Alex\Google Drive"\
This is 1) backup, 2) encrypted backup and 3) everything in the cloud is available on any PC and Android.
in Rohos, you can configure how often Google Drive will synchronize the container, and in veracrypt - each write to the disk - generates a write to the container with a change in the modification date of the container file, and as a result, Google Drive endlessly "fills" 5 GB into the cloud.
2. passwords in LastPass (used on 4 devices) and a U2F access key to it.
Podiskivayu now how to encrypt individual files on google drive. Because the container is not convenient when you need to work with files on Android and back on Windows. there is no good solution now.