( Note: If someone has root permissions, this won't make a difference. The Guest account cannot 'see' anything under /home because the session doesn't have the right permissions. residing under /home, as your account is likely to be). It might not be what you want if you'd like to provide permanent accounts (i.e. This is the ideal when you just want to 'borrow' your computer to a guest who wants to do some quick browsing. Your files are not visible - unless you've specifically given universal read permissions. The Guest Session option starts a temporary session for anyone borrowing your computer. The Session applet on the top right of your window allows you to start a Guest session, which disappears when you log out. Don't give out your password (or root's password) to other users.Don't use a root account as your normal user.You can simply set permissions on directories and/or files to keep the 'curious' from opening and browsing them. root) in your machine, or for example boot from a CD-ROM and mount and browse your filesystems (or even reading the raw disk sectors), you may not have to encrypt some/all files on your hard drive.

Unless you expect people to gain increased privileges (e.g. It is also important to use a good password (more than 20 characters at least, as recommended by the developers).When 'you are leaving your computer alone', unmout this using the 'dismount' option in the truecrypt GUI.You can move the sensitive files and directories within this filesystem.

After this whenever you mount this file-system using truecrypt GUI, you will see it in nautilus. You can choose the location of this file.

Using the gui you can create a new volume contained in a file.

Open TrueCrypt (normally found in Applications -> Accessories).

If, however, all that is stopping you from using Truecrypt is because you don't have a free partition / filesystem that you can use exclusively for storing encrypted data, then you can still make an encrypted file-system inside a file within your existing filesystem.įor this you need to have 'sudo' rights, i.e., you must be able to run sudo. As many pointed out, access control based on user id and encrypted filesystem is the only real way of securing user data.

Fast File Encryptor 11.12 download