DiskCryptor for Windows

Quick overview

DiskCryptor is a no-cost utility for encrypting and decrypting full disks, partitions, and image files on Windows machines. It supports creating encrypted ISO images, protecting external and internal drives, and can be extended by developers because its source code is publicly available.

Licensing and protection practices

• Distributed under the GNU GPLv3 license, giving users the freedom to inspect and modify the code.
• Open-source development increases transparency about how data is handled, but downloading installers from untrusted sites can still introduce risk.
• The program supports both passphrases and key files. You can pick an existing file or folder to act as a key, or let the application generate one for you.
• Important: adding a key file to a system/boot partition will render that partition unreadable to the boot process and prevent Windows from starting. Key files work normally for non-system volumes.

Cryptography and storage formats supported

• Encryption algorithms available include Twofish, Serpent, and AES (AES is the default choice in the UI).
• Compatible filesystem formats: NTFS, FAT32, exFAT, FAT16, FAT12.
• Tested operating environments include Windows XP, Windows Vista, Windows 7, Windows 8, and Windows 10.

Major capabilities and behavior

• Encrypts whole disks, individual partitions, and ISO images suitable for writing to CDs/DVDs.
• Works with dynamic disks and RAID arrays, and includes SSD TRIM support to avoid harming flash media performance.
• Multiple partitions can be processed simultaneously.
• Offers a pause-and-resume mechanism so large encryption tasks can be continued later or on another machine.
• Provides keyboard shortcuts to mount and unmount volumes, and it can automatically dismount volumes when you log out.

User interface and typical workflow

Top-level menu options (left-to-right in the application menu): Tools, File, Help, Volumes.

Primary action buttons in the control panel (reordered here): Decrypt, Unmount All, Encrypt, Mount All, Mount.

Typical steps to encrypt a partition:

1. Select the target partition in the left pane.
2. Click the Encrypt button in the right-hand commands area.
3. In the Encryption Settings dialog you can change the algorithm and the wipe mode if desired; defaults will proceed automatically.
4. Configure boot options (the default is to install the bootloader to the HDD) and continue.
5. Enter a passphrase (letters and numbers allowed) and optionally enable a keyfile — remember the warning about keyfiles on system partitions.
6. Confirm and start the encryption; the interface shows a password strength rating before proceeding.

If you plan to encrypt a system partition, create a rescue or recovery boot disc beforehand so you can decrypt the partition if you cannot boot.

Installation, footprint, and performance

• The installer is small and the program is lightweight, so it installs quickly and uses minimal disk space.
• The interface is straightforward and primarily menu-driven, with documentation and community guides available online to supplement the built-in help.

Alternatives to consider

• VeraCrypt — free, open-source, and cross-platform; offers strong pre-boot authentication and broad OS support.
• BitLocker — a Microsoft-built solution included with many Windows editions.
• DriveCrypt — a commercial product aimed at enterprises and proprietary-data protection.
• TrueCrypt — an older, discontinued project that influenced later tools like VeraCrypt.

Note: DiskCryptor, BitLocker, and DriveCrypt are focused on Windows environments; VeraCrypt supports macOS and Linux in addition to Windows.

Known issues and updates

While DiskCryptor runs on modern Windows releases, some compatibility and stability issues have been reported. Check the official project site for the latest releases, changelogs, and the privacy policy before installing.