Windows 10: Reflect image password protection and encryption...

Discus and support Reflect image password protection and encryption... in Windows 10 Backup and Restore to solve the problem; Licensed Macrium Reflect v.7.1.2885 on Windows 10 Professional, 64-bits... The system has three drives for different purposes, such as system,... Discussion in 'Windows 10 Backup and Restore' started by Cr00zng, Feb 19, 2018.

  1. Cr00zng Win User

    Reflect image password protection and encryption...


    Licensed Macrium Reflect v.7.1.2885 on Windows 10 Professional, 64-bits...

    The system has three drives for different purposes, such as system, business and personal data. Yes, a dual purpose small business PC...

    The current schedule creates a full image of all of the drives on the daily basis. The time it takes to backup the drives varies from 3 - 13 minutes, reflecting the size of the data stored on the drive, that ranges from 52GBs for the system and 158GBs for the personal drive. The business data drive is ~68GBs an the image creation time is:


    Reflect image password protection and encryption... [​IMG]


    What would be the backup performance hit for enabling the password/encryption feature? Also, how would it impact the time it take to restore the image?

    TIA...

    :)
     
    Cr00zng, Feb 19, 2018
    #1
  2. JimWynne Win User

    Encrypted word document - "user does not have access privileges"

    It appears that you created a double-whammy by both encrypting/password-protecting the files
    and encrypting the folder, which serves no purpose if the files are encrypted. It's the encrypting of the folder that's causing your issue because normally Office files that are password-protected are transferable. If they are important documents,
    surely you have backups.
     
    JimWynne, Feb 19, 2018
    #2
  3. Andre Da Costa, Feb 19, 2018
    #3
  4. RolandJS Win User

    Reflect image password protection and encryption...

    My first wild guess is maybe such would add 20% to the backup times. Make sure your USB and DVD boots for restore purposes fully "understands and uses" the password/encryption that the backup procedure used; meaning the boot should be able to restore without enduser going through hoops other than entering the needed password.
     
    RolandJS, Feb 19, 2018
    #4
  5. Cr00zng Win User
    I leave the schedule in place as is, the chances are that they will not overlap. And if they do, oh well...

    The system in question does have a USB Macrium Rescue Media and also enabled the Recovery Boot Menu option on this system. I'll test it tomorrow, just to see if the password works...
     
    Cr00zng, Feb 19, 2018
    #5
  6. Cr00zng Win User
    The schedule ran just fine last night, there has been no overlap with the image backups. Performance wise, it's a mixed bag.

    The first scheduled image backup is for the data drive (Samsung EVO PCIe x4 NVMe, 68GBs):


    Reflect image password protection and encryption... [​IMG]


    The read I/O performance dropped, while the write increased which does not make much sense. Maybe the data is compressed prior to encryption, like most encryption software does. In either case, it's about 30% increase in backup time.

    The next scheduled backup is for the system drive (Samsung EVO PCIe x4 NVMe, 52GBs) and it's interesting:


    Reflect image password protection and encryption... [​IMG]


    That's only a five second increase in image backup and minor changes in read/write I/O performance.

    The last scheduled image backup is for the personal drive (Samsung EVO Sata III, 158GBs) and it gets more interesting:


    Reflect image password protection and encryption... [​IMG]


    There's no change in the I/O performance and yet, the encrypted image backup finished faster than the no encryption. That makes even less sense...

    Mounting any of the last night's images does ask for password:


    Reflect image password protection and encryption... [​IMG]


    Seemingly, unlimited number of passwords can be entered, I tried more than a dozen different password, and the password is case sensitive. Once the correct password entered, the image is mounted. Presumably, the same window would pup up within the Reflect recovery environment, but it has not been tested.
     
    Cr00zng, Feb 20, 2018
    #6
  7. jimbo45 Win User
    Hi folks.

    This is one area I can never understand.

    Why on earth would anybody want to encrypt backup and password protect it -- at least for HOME users.

    If your computer fails and you have to restore you want to be up and running with the least possible aggro and in the fastest time possible.

    If you backup to cloud or corporate servers then perhaps --but at home !!!!! --- also what happens if you restore to a different computer or use a different machine to restore to your failing one - where you might need decryption keys / passwords - and even then the wretched thing might not work properly.

    Simply keep backup offline / external USB etc. That way you wont get any issues like lost encryption keys/ lost passwords etc on restore. That way is also 100% Hacker proof --if it's not online they can't get at it unless they physically break into your home. !!!!

    remember here most people are HOME type users -- you don't need to implement CIA type security surely on bog standard home laptops etc.

    Save yourself a lot of trouble and aggro -- if you are paranoid about your backup images store offline. !!!!

    Cheers
    jimbo
     
    jimbo45, Feb 20, 2018
    #7
  8. Cr00zng Win User

    Reflect image password protection and encryption...

    With all due respect jimbo....

    While most people here are home users, there are people who have home offices/businesses as indicated in my first post. Some of the data managed by these offices require backup data protection, either by regulations or by the owner. And yes, these people do have USB flash drive backup as well, you've guessed it, encrypted.

    In my view the Reflect image backup, with password based encryption, is also useful against malware especially with the image guard enabled. Yes, the system and other drives can be destroyed by malware, but restoring it from the backup image takes about the same time as backing up the image. It's a much faster recovery than trying to clean up the system, or any other drives. This is especially useful, if, or rather when nowadays some version of crypto-locker hits.
     
    Cr00zng, Feb 20, 2018
    #8
  9. lx07 Win User
    I encrypt my phone and all my PCs. I also encrypt my backups.

    Why? In case I lose them. Perhaps I leave them in a taxi or someone breaks into my house. Encryption means they can't get to see my address, email, bank details and the cunningly named document called "Passwords.docx" I have on my desktop.

    Identity theft is a real issue and encryption should be the first step everyone takes unless they have absolutely nothing of value on their device.

    For macrium I use a bitlocker encrypted volume (rather than encrypt the image itself) and have never tested the performance overhead. According to Microsoft it should be a "single digit percentage" but idk. Perhaps next time I'll get self encrypting drives but even if it took 2x as long I'd still encrypt.
     
  10. Cr00zng Win User
    @ lx07...

    I have the same file name...*chuckle*really

    Your protection type falls in the data at rest protection category. This protection is certainly necessary, for cases as you've listed.

    On the other hand, it does not provide protection for the data in flight. The "data in flight" does not only means over the network. It also means data in a system that is running, or more accurately, someone had logged in to the system.

    The operating system, by definition, provides open access to applications and devices, if and when the person logs in and the appropriate access level granted for the account used for this purpose. As such, should malware get on the system and runs by the logged on person's access level, it could expose/encrypt the data within the system boundaries, basically all accessible drives, including the unlocked external drive(s).

    This is one of the reasons why, I opted for password protect/encrypt the image backup. In addition, the MIG (Macrium Image Guard, not a military jet) prevents deleting, moving and modifying the image backups on the designated local drive. Reflect is a pretty good package and I for one like that they are protecting the image backups. Even if the cryptolockers have not started encrypting image backups. Maybe they did, I don't know...

    And no, this is not protecting the data against everyone, but it will against most people. And nowadays, that's all one can do on low budget...
     
    Cr00zng, Feb 20, 2018
    #10
  11. jimbo45 Win User
    Hi there
    @lx07

    Bonjour Monsieur !!!

    My point was NOT about Mobiles etc - but simple backups on HOME Computers / small home office type stuff.

    I mentioned specifically that for HOME computers --not corporates / Cloud backups etc encryption (of the backup - not the computer !!) was a waste of time and an unnecessary complication.

    - I'm not saying either that if you have a laptop you shouldn't encrypt stuff - especially if travelling or if you think laptop could get stolen / lost -- but there's NO REASON to encrypt the backup as well-- especially if you keep it off line.

    If the computer is already encrypted the backup simply copies the encrypted data -- why encrypt an already encrypted computer !!!. maybe you work for Mossad / deuxieme bureau etc !!!! who knows (and it's not my business to ask anyway). !!!!


    a toute a l'heure !!! sorry can't easily get French accents on my keyboard (Isl.)

    Cheers
    jimbo
     
    jimbo45, Feb 20, 2018
    #11
  12. cereberus Win User
    I rather tend to agree with you as most users never take their data outside the home but in the end each user has different needs eg if you are a government employee or military contractor, encryption may be crucial.
     
    cereberus, Feb 20, 2018
    #12
  13. lx07 Win User

    Reflect image password protection and encryption...

    No it doesn't work like that at all.

    In any type of encryption (EFS, Bitlocker, LUKS etc) if you backup your data it will be written plain. This is because the encryption is transparent once unlocked or your system just would not work. If you want your backup encrypted you must either encrypt the volume you write to or encrypt the backup file separately as in the OP.

    The only situation a backup would be still encrypted is if you did a sector copy of a disk from an external system (which is what Macrium does if you boot from PE and don't know the bitlocker password for example).

    Just think though for a moment what a thief could get from stealing your external drive with a unencrypted Macrium backup. Your name, your email address, your home address (via location), your browsing and email history, your bank details (probably), all your passwords for all websites you saved and so on and so on. And all the documents you backed up.

    I'm not saying you are irresponsible not to use encryption - that is your call based on what data you have and how likely you think someone will steal (and then use) it.

    As most people don't even consider it I really do think encryption should be turned on as standard (which many devices now require). If someone then wants to disable encryption for a 0% to 10% performance improvement then that is their call.

    If you don't want to encrypt - fine. I do and I'm a home user. I see the risk (of losing my personal information) to be far higher than any potential performance deficit.
     
Thema:

Reflect image password protection and encryption...

Loading...
  1. Reflect image password protection and encryption... - Similar Threads - Reflect image password

  2. Password Protection

    in Windows Hello & Lockscreen
    Password Protection: To access my laptop I currently use a PIN or I can use my Microsoft password. I am about to let someone else have access to my laptop to install some things so for the near future I would like to have a password that only opens my laptop and is not my microsoft password....
  3. password protection

    in AntiVirus, Firewalls and System Security
    password protection: How do I set passwords for specific folders or individual files? https://answers.microsoft.com/en-us/windows/forum/all/password-protection/104dd3dc-c77b-4026-a315-9771cdc10249"
  4. password protect

    in Windows 10 Customization
    password protect: how can I password protect settings? I am wearing thin with a certain company reverting them back to default without permission of the PC,s owner https://answers.microsoft.com/en-us/windows/forum/all/password-protect/d9dc5b16-585f-4dde-90d7-f0c1b38a4fdc
  5. Macrium reflect image change

    in Windows 10 Backup and Restore
    Macrium reflect image change: I change my image and everything ok. The only problem I can't get my backup files 136075
  6. Password Protection

    in Windows 10 Installation and Upgrade
    Password Protection: I am looking for a solution or something built into windows that will produce & protect my password. these days we seem to need password for so many sites & devices. It would be nice to have something that you can load all your login details into then each time you go to...
  7. Macrium Reflect Password/Encrypt: Yes/No?

    in Windows 10 Backup and Restore
    Macrium Reflect Password/Encrypt: Yes/No?: In the 1 in a million (at least) chance that I get nailed for ransomware (with Norton and paid Malwarebytes running), I thought I was protected having images stored on an external drive. But I guess you could increase those odds and say the attack came when the drive was...
  8. Macrium Reflect image will not delete?

    in Windows 10 Backup and Restore
    Macrium Reflect image will not delete?: I've been using the free version for a few years. I downloaded the paid home version's 30 day trial. Before running my daily, scheduled backup to an external drive, I ran a test image to a flash drive (T:\Macrium TEST Onedrive\BE1C13BDDEE1C020-00-00.mrbak). I tried to delete...
  9. How to copy encrypted, password protected file to a remote server?

    in Windows 10 Support
    How to copy encrypted, password protected file to a remote server?: I have an encrypted and password protected file. The directory and entire file structure is encrypted. I guess that means that the directory is password protected and all subdirectories and files are encrypted. I want to get a copy out on an FTP server without encrypting it....
  10. Encryption Password change

    in Windows 10 Support
    Encryption Password change: I read that if a folder is encrypted and I change my login password, then I can't login to that folder anymore. I was testing that on my folder, I did encrypt it, now it's green, I went and changed my password and login again, but I still can access my encrypted folder....