Encrypt Your Dropbox Files with VeraCrypt

Tags

backup, linux, mac, organization, osx, tech, yosemite

UPDATE 2017-09-21: What follows is my workable but convoluted system for securing sensitive files in Dropbox. As an alternative, you may instead consider a zero-knowledge, encrypted backup service like SpiderOak. Easier. -JMT

There comes a time in every man’s life when he realizes that it’s totally not smart to keep sensitive personal documents in plain text on Dropbox.

VeraCrypt Mounting a Volume

For me, that time was last Monday. I spent this week searching for and experimenting with possible solutions, and I’ve now got a system in place that I’m pretty happy with, so I thought I’d share.
The problem, as I see it, is that the important stuff needs off-site backup — but the important stuff tends to be the same as the sensitive stuff, so it’s exactly the stuff that shouldn’t just be sitting on Dropbox. (Yes, I know Dropbox encrypts your data already. If that’s enough for you, more power to you.)

The system I’ve set up on my OS X Yosemite machine is this:

1. Create a folder in ~/Documents called Encrypted. Collect all my important stuff there.
2. Use VeraCrypt (free) to create an encrypted volume; we’ll call it EncryptedVolume.
3. Use Carbon Copy Cloner ($40; worth it) to clone ~/Documents/Encrypted to EncryptedVolume.
4. Place EncryptedVolume in ~/Dropbox.

Now you can just use your ~/Documents/Encrypted folder on an ongoing basis, and you don’t have to fool with opening encrypted volumes or anything else when you’re in a rush. Just use the folder as normal. And when you do have time, and/or you make important updates, use Carbon Copy Cloner to re-sync the folder to EncryptedVolume. CCC will only copy the updates, Dropbox will only upload the file difference, and nothing will be uploaded until the drive is encrypted and unmounted again. So everything is both efficient and secure during each step.

That’s the best compromise I could find between convenience and security. I chose VeraCrypt both because it’s open source and because it’s available for Windows, Mac and Linux. So if my computing situation changes and I’m ever in a pinch, I can open my encrypted documents on any computer* (I also chose to format EncryptedVolume as FAT for the same reason).

Of course, you can do this without CCC, as long as you don’t mind a little manual housekeeping. But CCC is already the bedrock of my backup solution, so it made sense to leverage it here, too.

*I had one hiccup on Linux — after Dropbox syncs EncryptedVolume to your Linux box, you need to give yourself write permission to the file, or the drive will be mounted read-only. You only need to do this once, the first time it downloads.

 

Use NeoFinder to Reclaim Hard Drive Space

Tags

backup, editing, freelance, osx

Duplicates Found

I’ve written about NeoFinder before. It’s a great tool to keep tabs on files across multiple external hard drives. (Basically, it creates a searchable database of every file on each of your drives, which you can then quickly search even when those drives are not plugged in.)

Ok, so that’s great. Easily worth the cost of a license. But what’s even better is the built-in “Find Dupes” feature. Once you’ve cataloged all your drives, just hit the Find Dupes button and it will let you know what projects or files are living on multiple drives.

I cleared over 100 GB in just a couple minutes when it reminded me that I had started a recent project on one drive and then moved it to a portable drive to finish it. (And it found quite a bit more than that, which I’ll deal with when I have a bit more time.)

Check out NeoFinder if you haven’t already. Really – I’m totally vouching over here. Great stuff.

Simple, Efficient Backup for Creatives

Tags

backup, editing, freelance, mac, organization, tech

NOTE: This article was originally posted 8/11/2013.

Backing up our data is important. We all know that. But particularly for creative professionals, our data is our livelihood. Lose one project due to hard drive failure, and your reputation is ruined with that client forever. And yet, so frequently I find that freelancers and even small companies don’t maintain adequate (if any) backups. Why?

Expense is always an issue, but with today’s hard drive prices, it’s no excuse for risking your client’s work and your reputation. If the confusion inherent in the backup landscape is your excuse, then I’m here to help. You don’t need a RAID array or a NAS or a SAN or a data locker to take basic precautions for data redundancy. Below is a simple, effective backup strategy I developed for a small production company I used to work for, and which I implement now in my own freelance practice.

Step 1 – The Archive
This is where your projects go to die. Well, that’s not entirely accurate. Let’s say they “retire.” Because you never know when a client will want an update to something you produced for them two years ago, or if you’ll want to go back and grab an old After Effects animation to use as a template in a new project. The Archive is where projects live after you think you’re done with them.

The Archive is simple. For every hard drive you need to keep archived material, you buy two. So if you have 1 TB worth of old projects, you buy two 2 TB drives. You put all your projects on one of them (leaving room to grow), and then you mirror it to the second. Whether you need one, two, or twenty drives, you keep them all mirrored, all the time. There’s no mismatching – each hard drive has an exact mirror. There’s no throwing projects just anywhere and then trying to remember to back them up somewhere else later, when you get a chance, and THEN trying to remember where on Earth either of those copies went. Projects enter The Archive chronologically, so when you need something you just need to remember approximately when you finished it, and then find that drive.

Step 2 – The Working Drive
Next, for active projects, you get a portable drive and a place to back it up, and do the same thing. If you’re a freelancer, that’s pretty much it. If you’re a company with multiple editors, you give each editor a personal portable Working Drive and a place to back it up. They keep all their active projects on that drive, and they keep it with them for those inevitable times when a client needs something unexpected over the weekend.

If you’re a freelancer, it works in the other direction – your Working Drive is always available to bring to a client’s location when necessary, and always has your current work on it. You can just buy two identical portable drives, but a cheaper solution is to back it up to another desktop drive. I use Time Machine to back up my portable to my Time Machine backup drive along with all my system files.

Step 3 – The System
Now we have a simple, elegant backup solution. Keep all current work on your portable Working Drive, and keep that drive either mirrored or backed up to a desktop drive. When you close the books on a given project, move that project to The Archive, make sure that it’s mirrored, then remove it from your Working Drive to reclaim the space for your next project.

You can perform the mirror backups manually, or you can use software to automate the process. If you’re on a Mac, Carbon Copy Cloner is a free program that will keep two drives matched, always updating one to match the other whenever changes are made. (If you’re using a PC, then you probably have 20 different options, none of which actually work any better than CCC.)

Bonus Level – Off-site Backup
If you’re serious about backup, you need to also think about off-site backup. Keeping all your drives mirrored protects you in case of hard drive failure, but in case of fire/flood/theft/volcano, you’re still hosed. So if you want to take that extra step, it’s built into the system: just take those mirrors and keep them somewhere else. If you’re a freelancer, keep them at a friend’s or family member’s house, or store them in a bank safe deposit box. If you’re a small company, send the mirrors home with some trusted employees. You’ll need to retrieve them when it’s time to update the mirror, but c’est la vie, amirite?

Agitator Level – But what about the cloud?
If you’ve got Verizon FiOS or an OC-3 connection, by all means, just dump it all to the cloud and forget everything I said. Crashplan has some reasonably priced plans and comes highly recommended by the interwebs. But for the rest of us, HD video is far too massive to realistically back up to the cloud. It would take days of a constant streaming upload to backup just a few hours of footage. So please stop showing off; if we had FiOS in our area, we wouldn’t rub your nose in it.