Thinkpads Forum

So I am loving my "new" x60 tablet. I am looking to carry it with me everywhere, however, I am worried about my data ending up in the wrong hands if it is stolen. I just wanted to hear from the forum as to what they would suggest to be the best way to protect it. Here is what I have come up with so far:

Software:
windows password: lowest security, easily hacked- if it is the same as firefox passwords, you are really screwed
fingerprint software: based on windows password, supposedly there are ways of using a simple process to lift your prints
encryption software for my documents: sounds promising but does not protect windows & possible passwords/cookies in firefox

Hardware:
hard drive password: very promising, but I am unsure of how well this works. Is the hard drive protected even when removed from the system?
BIOS password: possibly the best protection I have from the basic thief. However, if I lose the password, I am SOL. Also, removing the hard drive allows the data to be accessed?
Using both passwords: I think this is the most secure I can be? Do I have to type in two passwords or just one?

I am kind of embarrassed to be using Thinkpads since 98 and and unfamiliar with how BIOS passwords work. I know more about removing them then putting them on LOL (shhh, I didn't say that -it's not allowed here!

My main goal is to protect my data & website passwords as simply, efficiently, and unobtrusively as possible. I am not too concerned about what happens to the laptop after it is out of my hands. Intellectual property is irreplaceable!

Any help would be greatly appreciated.

Here's what I use for the systems that travel out of the house on a regular basis:

- No power on password
- BIOS password enabled
- Hard drive password enabled (different than the BIOS password)
- No Windows login password

Turning the system on, I only need to enter the HD password to boot the system before Windows loads. The BIOS password is only in place to prevent access to the system setup and will not be required for normal power-ups. It is extremely critical that the two password are set differently! If it is possible to extract the BIOS password, then the data on the HD can be compromised. If uninformed people assume that they can get around the BIOS password by pulling out the backup battery, then the system is locked from further operation. I don't set a power-on password as I only want a single password prompt (the HD) when turning the system on. If you would like to have an additional level of security then enable the power-on password. Again, this would help in the situation where the thief believes that he/she can bypass it by pulling the backup battery. That would eliminate the power-on password but the BIOS password would automatically kick in.

The HD password goes with the drive so that should protect it from access unless significant money is thrown at it. I'm betting that whoever steals my system is only doing so in order to make a small profit by re-selling it on Craigslist or eBay and isn't after any of the data on the drive.

Note that no security system is 100% effective. It's a balance between the everyday hassle of entering (multiple) passwords versus the potential of access to the personal data that's on the system. You could also enable Windows login and drive encryption options to keep your data safer.

Thank you. That was incredibly clear. I knew I could count on the forum..especially the senior members. Pros!

Rosannafe wrote:Thank you. That was incredibly clear. I knew I could count on the forum..especially the senior members. Pros!

Hey! I'm not yet at the age where I can draw on my pension plans .

LMFAO..I knew I'd get that reaction! Senior in seniority only....as far as I know! Ooopsss....maybe I'll just say admin next time!
**Edit** If you could suggest a nice encrypt software, I'd be in your debt.

Rosannafe wrote:... My main goal is to protect my data & website passwords as simply, efficiently, and unobtrusively as possible.

Everything above ... + FDE (Full Drive Encryption):
Given your stated goal above, the "gold standard" is to use a hard drive that has hardware always-on full drive encryption, and the data on the drive will remain private regardless of how much money is thrown at compromising its security.

Lenovo offers FDE on Hitachi and Seagate drives up to 250GB.

If you settle for software encryption -- but why do so, given how inexpensive the "gold standard" is?! -- then use TrueCrypt:
http://www.truecrypt.org/

Thanks for the heads up. Should I be using th TPM? If so, how should I?
**edit** I am looking at your other thread: http://forum.thinkpads.com/viewtopic.ph ... pm#p605665. let me see if I can read it and get some info. Thanks!

I think I came up with a secure and convenient solution. I downloaded the full version of protector suite and locked my hard drive in the bios. I can then log into my computer via finger swipe at boot time. It is simple, quick, and I feel better. I am really loving the full version, it allows me to use it in firefox & assign programs to start with swipes. Really cool. I am kinda sad it wasn't included in the drivers download like with other companies. I got it from here: http://www.gd-itronix.com/index.cfm?pag ... a&is_old=0 Seems like a legit website, not stealware. Thanks for your help and I hope my solution works for others too!