WEBVTT 00:00.290 --> 00:06.890 In this lecture, I'm going to show you how to securely format and wipe a USB device and encrypt it 00:06.890 --> 00:15.260 so everything stored on that USB device will be unreadable unless you know the passphrase used for the 00:15.260 --> 00:16.100 encryption. 00:16.430 --> 00:21.650 And to do this again tells what comes with pre-installed tools that allow us to do this. 00:21.650 --> 00:24.410 All we need to do is go to applications. 00:25.010 --> 00:26.420 Utilities. 00:26.420 --> 00:29.570 And we're going to go to the disk utility right here. 00:30.410 --> 00:37.760 Now this utility can be used to format and encrypt any storage device connected to your computer right 00:37.760 --> 00:38.300 now. 00:38.300 --> 00:44.060 So as you can see right here, it's listing all of the storage media that I have connected to this computer. 00:44.060 --> 00:50.420 And as you can see, even if we look here on my file manager, you can see that I have an eight gigabyte 00:50.420 --> 00:50.930 volume. 00:50.930 --> 00:55.640 This is another USB device, not the one that I'm using to boot tails. 00:56.150 --> 01:01.610 And let's assume that I want to securely wipe everything that is in here. 01:01.850 --> 01:06.770 To do that, we're going to go and select it from here, from the left. 01:06.770 --> 01:10.160 And in here you can obviously unmount it. 01:10.160 --> 01:17.300 You can delete the selected partition or you can click on the COGS here to get more options. 01:17.540 --> 01:21.170 And what I want to do right now is format the partition. 01:21.770 --> 01:27.080 And when you click on format, you'll see the first option is the erase option. 01:27.080 --> 01:34.710 So this is set to don't overwrite the existing data, which will be quick, but it's not secure because 01:34.710 --> 01:41.610 it will only mark the locations for available for writing, but the data will still be available and 01:41.610 --> 01:43.620 it'll be easily recoverable. 01:43.830 --> 01:49.410 Therefore, if you want to securely wipe your device, the selected device in here, you want to click 01:49.410 --> 01:50.210 on this. 01:50.220 --> 01:56.130 This will be slow, as you can see, but it will overwrite everything with random data which will make 01:56.130 --> 01:59.820 your previous data that you stored on it harder to recover. 02:00.360 --> 02:07.320 The next option in this window is the file system type that will be used on the storage device. 02:07.320 --> 02:10.170 Now, you usually see this in any operating system. 02:10.170 --> 02:15.720 When you try to format a storage device, you can set it to whatever type you want. 02:15.810 --> 02:22.140 As long as this type is compatible with the operating system that you're going to use it on, you can 02:22.140 --> 02:26.760 use fat or NTFS for windows ext4 for Linux. 02:26.760 --> 02:32.280 Then set the name of the storage media and click on format to format it. 02:33.770 --> 02:41.990 Now, this whole application can also be used to encrypt your storage media after formatting it so that 02:41.990 --> 02:48.770 whenever you store data in it, everything that you store will be encrypted and nobody will be able 02:48.770 --> 02:52.940 to read it unless they know the passphrase used to encrypt it. 02:52.970 --> 02:59.030 So it's similar to the way the persistence storage is configured on tales, because as you remember, 02:59.030 --> 03:06.170 when we set it up to use persistence, I said that this will be an encrypted storage and we set a passphrase 03:06.170 --> 03:10.190 that we need to use in order to unlock the persistence part. 03:10.190 --> 03:12.350 So this is very similar in here. 03:12.350 --> 03:19.340 You can use this program to encrypt a whole USB device, and to do this you just need to click here 03:19.340 --> 03:25.970 on the type and set it to encrypted compatible with Linux systems, which will use Linux encryption. 03:26.480 --> 03:30.440 Now when you click this, as you can see again, you'll have to fill up the name. 03:30.440 --> 03:39.710 So let's say encrypted drive and then we'll have to new input boxes asking us for the passphrase that 03:39.710 --> 03:46.730 will be used to encrypt the storage device so you can pick any strong passphrase you want. 03:47.090 --> 03:48.770 Click on format. 03:49.490 --> 03:55.070 It's going to ask us to confirm that we're formatting the right drive because keep in mind, this will 03:55.070 --> 03:59.030 remove everything that is stored on this device. 03:59.060 --> 04:04.610 It will securely remove that actually to make it very difficult to recover and it's going to encrypt 04:04.610 --> 04:12.140 it so that whatever we store on that device will be unreadable unless the right passphrase is used. 04:12.470 --> 04:14.600 Now, I'm going to say, yes, I want to do this. 04:14.600 --> 04:20.300 I'm going to click on format, give it its time, because like we said, this will not just remove the 04:20.300 --> 04:26.930 files, it will overwrite everything that's there on the device with random data and then remove this 04:26.930 --> 04:33.110 random data to make sure that our previously stored data is very hard to recover. 04:33.320 --> 04:40.320 Once it does all of this, it will also encrypt the storage so that everything we have on it is unreadable. 04:40.320 --> 04:41.880 Without the passphrase. 04:42.450 --> 04:47.430 Now, once done, you'll see the loading circular icon is gone from here. 04:47.430 --> 04:52.410 So that means that the device has been securely wiped and encrypted. 04:52.410 --> 04:58.590 So what I'm going to do right now is I'll close this and I'm actually going to disconnect it from this 04:58.590 --> 05:04.860 computer just to show you what happens when you go ahead and connect it to a computer. 05:04.860 --> 05:11.490 So I'm going to physically remove it now from my Tales computer and I'm going to connect it again. 05:12.000 --> 05:17.370 And as you can see, it appears in here again on the left saying it's an encrypted device. 05:17.370 --> 05:21.630 And if I click on it, you'll see that I can't open it. 05:21.630 --> 05:26.100 I can't see its content because we encrypted this device. 05:26.100 --> 05:33.030 And like I said, it's not going to be accessible unless we know the passphrase in order to decrypt 05:33.030 --> 05:34.850 it and see its content. 05:34.850 --> 05:39.200 So I'm going to put the passphrase that I set when I encrypted the device. 05:40.250 --> 05:44.150 And only now, as you can see, the lock is gone. 05:44.150 --> 05:46.380 And it opened the device for me. 05:46.400 --> 05:51.290 Now, obviously it's empty because we just wiped it and we securely wiped it. 05:51.290 --> 05:56.720 So the data that previously was stored on it should be very difficult to recover. 05:56.720 --> 06:04.550 And now if I put any data on this and disconnect the device, even if someone manages to get their hands 06:04.550 --> 06:12.500 on the device and read the content of it, the contents will be gibberish because everything is encrypted 06:12.500 --> 06:16.280 and it's not readable unless they know the passphrase.