I've purchased myself a Mac Book Pro Retina (Haswell) and after giving Mac OS a fair shake have decided to go full Windows 7 and Bootcamp. There is no Mac OS install left on this system.

I am now looking for a way to encrypt my entire hard drive. My requirements are simple:

  • AES based whole disk encryption (to take advantage of AES-NI)
  • Ability to boot by just entering a password

I've looked at the following:

  • Truecrypt is a no-go because it is not recommended for use with SSDs
  • Bitlocker is a no-go because there is no TPM in this system and I don't want to haul around a USB thumb drive with me every time I have to boot.
  • Symantec Whole Disk Encryption appears to meet all of my requirements

Before I drop $100 on Symantec I figured I'd ask the exerts if there is any other software out there I can use. I prefer Open Source but understand that might not be possible.

  • After re-reading the following: truecrypt.org/docs/wear-leveling and truecrypt.org/docs/trim-operation I've decided that I'm willing to take the small(ish) risks involved with using Truecrypt on a SSD. My goal is to prevent the average chud from throwing a LiveCD into my system and access the files on the hard drive and I believe I can achieve that with Truecrypt. – FiZi Feb 5 '14 at 4:36

GNU Privacy Guard

As a long time user of both TrueCrypt and Symantec I cannot recommend both highly enough.

I have not had any issues with either.

I have also used GPG which is OpenSource and it works well.

And here is an article from a google search which provides two other solutions I have not used.

  • 1
    I'd love to use Truecrypt but their documentation doesn't seem to recommend it's use for whole disk encryption of a SSD because of TRIM. Symantec says they fully support SSDs but their price tag is a bit high. GPG doesn't do whole disk encryption I don't believe – FiZi Feb 5 '14 at 2:59
  • I know, you said so much in your question - hence I would go with Symantec. But if you want opensource go with GNU. – Deesbek Feb 5 '14 at 2:59
  • So you are looking for a decryption password at boot time? In that case yes, GPG does not do what you want it to. – Deesbek Feb 5 '14 at 3:06
  • What I want is basically Truecrypts whole disk encryption. It encrypts the entire drive and at boot asks me for a password to unlock it. – FiZi Feb 5 '14 at 3:27

It's worth noting that BitLocker can be run without needing a USB key. More information can be found here, scroll down to "Use BitLocker on a Drive Without TPM."


TrueCrypt works perfectly fine with SSD, I'm not sure where you got the idea that it does not.

There are more options, VeraCrypt (the new truecrypt) and DiskCryptor which is a bit faster than most for OS encryption

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .