Parts of this have been discussed elsewhere but this is a broader project. I have a Windows 10 system. I have 512GB SSD split between C: and D: drive, nothing much on there the OS and apps. 2TB HDD that is curently empty, and another 2TB SSD that has everything that matters, about 1.2TB worth. SO here is what I am looking for. I want to do a MBR lvl encrypt on the 512GB OS drive, and I don't have a physical backup of the OS, it came with the computer. Then when I hit the logon screen I want an encrypted dummy acount that I will domp some BS on. Then my main account which I would like to have in a hidden encryption area. All of this will basically fit in the 512GB area. I can encrypt the external volums as needed later. I have previously use Trucrypt. Basically I am trying to figure out how to do the MBR encryption and two accounts without starting from a blank system. I don't even know if it is possible. Also could I do 2 seperate MBR passwords. One that goes to my active account, and the other to the BS account. I know that I can do this at the login point. Just want to have it a level lower. The person who I am securing the PC against knows the use of Truecrypt very well. Knows about MBR encryption, and has physical access to the PC for long periods of time. As I have always known if someone has physical control of a PC it is only a matter of time before they can break any level of encryption. So like your moto says, I am looking for the super paranoid level. Any assistance you can give will be apreciated.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Parts of this have been discussed elsewhere but this is a broader project. I have a Windows 10 system. I have 512GB SSD split between C: and D: drive, nothing much on there the OS and apps. 2TB HDD that is curently empty, and another 2TB SSD that has everything that matters, about 1.2TB worth. SO here is what I am looking for. I want to do a MBR lvl encrypt on the 512GB OS drive, and I don't have a physical backup of the OS, it came with the computer. Then when I hit the logon screen I want an encrypted dummy acount that I will domp some BS on. Then my main account which I would like to have in a hidden encryption area. All of this will basically fit in the 512GB area. I can encrypt the external volums as needed later. I have previously use Trucrypt. Basically I am trying to figure out how to do the MBR encryption and two accounts without starting from a blank system. I don't even know if it is possible. Also could I do 2 seperate MBR passwords. One that goes to my active account, and the other to the BS account. I know that I can do this at the login point. Just want to have it a level lower. The person who I am securing the PC against knows the use of Truecrypt very well. Knows about MBR encryption, and has physical access to the PC for long periods of time. As I have always known if someone has physical control of a PC it is only a matter of time before they can break any level of encryption. So like your moto says, I am looking for the super paranoid level. Any assistance you can give will be apreciated.