📎 AI Summary:
The thread discusses the limitations of Windows EFS encryption, which encrypts files at rest but decrypts them on-the-fly during access, allowing encrypted files to be viewable on Android devices when transferred. The original poster wants to prevent encrypted files from being viewable on other devices, even if copied, emphasizing the need for stronger encryption. The responder suggests using tools like VeraCrypt or TrueCrypt to create encrypted containers, or employing enterprise-level solutions like BitLocker with VHDs to better secure data during transfer and storage. Overall, the conversation highlights that Windows EFS alone doesn't provide foolproof protection when files are moved to other devices.
Nauman

Nauman

New Member
Member details
Joined
Jan 22, 2016
Messages
2
Thread Author #1
I have some pictures files encrypted in windows. When I transferred that encrypted files in android, the mobile show them as normal without decrypt. With this the purpose of encryption becomes vain. What is the reason behind this and how can we secure our personal data with encryption?
 

Solution
Neemobeer
EFS only does data at rest encryption. Meaning while it is on your hard drive it is encrypted. If someone took your hard drive out and tried to look at the data they could not. When you access that data Windows does on the fly decryption because the key is based on your Windows SID. If you copy the encrypted files to your android device or any other storage media Windows does the same thing. On the fly decryption and then copies the data. Even many full disk encryption solutions won't keep the data encrypted if you copy it unless you go with a enterprise product such as Checkpoint Encryption or Sophos Encryption which can be configured with a policy to prevent copying to storage media without encrypting the media. You could , like...
Sort by date Sort by votes
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
#2
What encryption are you using and if you try and open the files, are they viewable? If you are using the Windows EFS and you copy the file over to the android phone, windows decrypts the files on the fly for viewing and copying. The copy on the android device is no longer encrypted.
 

Upvote 0 Downvote
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
#3
You could use something like true crypt to create an encrypted container and you would be able to transfer it and still be required to enter a password however I don't know that it would be viewable on android
 

Upvote 0 Downvote
Nauman

Nauman

New Member
Member details
Joined
Jan 22, 2016
Messages
2
Thread Author #4
i am using EFS. It is vieweable in mobile when i copy the encrypted file in android. Actually i want that with encryption the files open only in my pc and no one can see it by copying in to their computer.
 

Upvote 0 Downvote
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
#5
EFS only does data at rest encryption. Meaning while it is on your hard drive it is encrypted. If someone took your hard drive out and tried to look at the data they could not. When you access that data Windows does on the fly decryption because the key is based on your Windows SID. If you copy the encrypted files to your android device or any other storage media Windows does the same thing. On the fly decryption and then copies the data. Even many full disk encryption solutions won't keep the data encrypted if you copy it unless you go with a enterprise product such as Checkpoint Encryption or Sophos Encryption which can be configured with a policy to prevent copying to storage media without encrypting the media. You could , like a said, use True Crypt or Vera Crypt to create encrypted containers and put your data in them. If those containers get copied they stay encrypted.
 

Upvote 1 Downvote
Solution
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
#6
If you only use Windows and you have either Windows Pro or enterprise you can also create an attach a VHD file (virtual hard drive), mount it to a unused drive letter and then use bitlocker to encrypt the VHD file. So if someone steals the file it will still be encrypted.
 

Upvote 0 Downvote
You must log in or register to reply here.