Ask HN: Do you encrypt your laptop's SSD/hard drive?
2 comments
Yes, I encrypt my laptop drives. Laptops are incredibly likely to get left behind somewhere or stolen, so it's super critical to make sure you aren't keeping the sole copy of important data on it and that the data that is on it is encrypted.
Performance impact is pretty negligible on an SSD with most modern operating systems.
EDIT: Another thing to be aware of, built-in hardware encryption on a drive is not necessarily adequate, and some encryption schemes will default to just using the hard drive's own encryption if available (such as BitLocker): https://portal.msrc.microsoft.com/en-US/security-guidance/ad...
You want to make sure you're using software encryption from your OS.
Performance impact is pretty negligible on an SSD with most modern operating systems.
EDIT: Another thing to be aware of, built-in hardware encryption on a drive is not necessarily adequate, and some encryption schemes will default to just using the hard drive's own encryption if available (such as BitLocker): https://portal.msrc.microsoft.com/en-US/security-guidance/ad...
You want to make sure you're using software encryption from your OS.
Yeah, do it. I just use Filevault. You wont notice any performance loss and the gain is huge.
Is there a functional difference between FileVault and encrypted APFS?
Short answer - no functional difference between encrypted APFS and FileVault. https://www.blackbagtech.com/blog/2018/04/02/ask-expert-apfs...
Is there an advantage/disadvantage to encrypting the drive versus, say, using a strong login password? Should I expect a significant performance hit if I do end up encrypting the drive?
Right now I'm just using the laptop for office work, but I plan on heading back to school in the near term and probably should worry about theft.