Configuring BestCrypt Data Shelter for maximum privacy requires setting strict zero-trust, process-level access controls to isolate your sensitive “data-in-use” from unauthorized users, malware, and ransomware. While traditional encryption tools like BestCrypt Container Encryption protect data at rest, Data Shelter locks down files the moment they are decrypted and opened. 1. Enforce a Strict “Default-Deny” Protection Policy
By default, you should ensure that nothing accesses your sensitive files unless explicitly whitelisted.
Add target folders: Launch the program and use the Add Folder option to select directories holding sensitive data.
Create a custom policy: Under the Policy section, click Create and give it a restrictive name (e.g., “Max_Privacy_Policy”).
Switch to Selected Users: Instead of allowing “All Users”, change the access criteria to Selected Users and select only your specific local account. This blocks other user profiles or guest accounts on the machine from snooping. 2. Harden the Trusted Programs List (Process Isolation)
The core of Data Shelter’s privacy defense is stopping untrusted software (like web browsers, Trojan horses, or spyware) from reading your active files.
Avoid auto-registration: Do not rely completely on history-based automatic whitelisting. Manually audit your program list.
Limit trusted applications: Only add the absolute minimum executable processes required to edit those specific files (e.g., allow only notepad.exe for text logs, or a single trusted offline backup manager).
Block internet-facing apps: Never add web browsers, email clients, or messaging apps to the trusted list of a sensitive folder to prevent accidental data leaks or malicious remote access. 3. Layer with Physical Volume Encryption
Data Shelter is most effective when combined with underlying hardware-level encryption to prevent cold-boot attacks or physical drive theft.
Policy-Based Data Access Control with BestCrypt Data Shelter
Leave a Reply