Windows 10: Advice on approach to encryption...

Hi
Would really appreciate experienced view on protecting personal data (banking, etc) on a laptop.

Intel [email protected] with 16Gb Ram running Win 10 Home v.1909. Very old versions of Word and Excel. 2 SSD's

Unfortunately started using it before really thinking about security. Have moved My Docs off C: onto D:

Wondering whether to
1: Encrypt both drives (using veracrypt). Question is will this slow my PC noticably?

2. Encrypt only the D:. With 2 options
2a. Put only My Docs on the D: and regularly (especially when travelling) clear all Temp Folders on the C drive to ensure no copies of documents are stored there. I presume 2 things here - i) that deleting the Windows and Broswer Temp folders i woudl remove any traces of personal word/excel, etc files i have had open and ii) this would this cause no issue at all to the running of the PC? Seems a little labour intensive but a safe option.

2b. Put My Docs AND Windows Temp folders onto the D: and then encrypt. Would this cause an issue in booting Windows when the Temp folders are on the encrypted D:? I have no idea...i'm not that computer savvy.

Can someone please enlighten me as to the best approach, there is very likely other better ways i have not considered.

Thanks very much in advance
Syn

:)

 

Advice on approach to encryption...

dalchina, i really appreciate your answering my question. But with regards to advice on the pros and cons on the options i am now at a complete loss.

So, Ccleaner - i''ll look elsewhere for replacements...i have done this a number of times before and come up a loss (as per the anedote i gave before). But i'll try again.

Re the pros and cons.
1. As moving the default "Documents" (on the D into an encrypted folder can cause serious issues, this leaves me with the option of encrypting the whole D:. Will doing this just function as it does now (on D: but unencrypted) or will it likely cause issues/significantly slow my machine?

2. When you say, the risk of leaving temp files on the C: depends entirely on how i process them, what do you mean? I don't know what processing options i have. My thoughts were to clear the Temp folders manually - but as you rightly highlight - this won't remove the data will it until (it is overwritten)! So am i right in guessing finding the replacement for Ccleaner as the best approach?

I don't know how to explain the advice i would like other than i have above. Stability and lack of impact on computer resources are priorities. I know it is hard to make everything secure unless you encrypt the C: and D: entirely, but as i understand it, this can significantly impact performance - I may be wrong!

 

Advice on approach to encryption...

So if Trim is not that are you saying that Ccleaner is and can work werll on SSDs?

Apologies, yes i mean the default "Documents" folder.

I understand i have the option of creating a folder on the D: or encrypting the whole. As i know very little about this, i really need advice on which will be most stable and less likely to cause issues. Encrypt a folder alone on the D: (and do i move the "Documents" folder into that by using the Location tab, OR is it more stabel to encrypt the whole D:?

On the issue of the C: drive, is there any advice on the best way to remove any potential temporary file copies? Would that be running Ccleaner, Disk Eraser or the like?
Thanks
Syn

 

Advice on approach to encryption...

"I've answered this. You have two different options. You DON'T have to encrypt the whole of D"
I do, but you advised that moving the "Docs" folder to an encrypted coudl potentially cause me a nightmare (and has caused problems for others before)... I was not aware of this risk (thank you for flagging it to me) and of course want to avoid it. And so the other option i know of is to encrypt the whole D:. On that i am asking you for further advice - would encrypting the whole of the D:, with my Location Tab relocated "Docs" folder put me again at similar risk of the nightmare problems mentioned above?

Bitlocker - right. So if i used that to encrypt the D and C then it would not really affect my laptops performance? Sounds good!

- - - Updated - - -

Can anyone advise me on this please?