“信息(Information)是国王的商品。” 这句话出自托尼·罗宾斯 ( Tony Robbins ) 之手，但只要我们有皇室成员资格，它肯定就是一个公理。正如我们保护金钱或珠宝等其他贵重物品一样，我们也需要保护我们的信息。
确保信息安全的最佳方式是使其对其他人毫无意义。我们通过加密来做到这一点。我们没有钱让企业和政府加密软件，所以我们必须看看免费的加密软件。仅仅因为它是免费的，并不意味着它不好。因此，我们向您展示了最好的免费加密软件。
关于加密(About Encryption)
您知道加密意味着除非您拥有密钥，否则数据将无法读取。(encryption means making data unreadable)您可能不知道用于加密数据的不同方法或算法。
加密密钥(Encryption Keys)
将加密(Think)密钥视为一种高级密码。不同之处在于加密密钥通常非常长且随机。您经常会看到它们被称为 128 位或 256 位密钥，这是一个可被 8 整除的数字。数字是指组成密钥的位数或密钥的长度。
虽然密码可以让您进入某事，但加密密钥也是加密和解密数据过程的一部分。加密数据的外观取决于密钥。
对于只有您可以访问的数据，对称密钥(symmetric keys)效果最好。之所以称为对称，是因为密钥在双方都有效——加密和解密。对于这个系统，密钥(Key)长度并不重要，因为您应该是唯一拥有密钥和物理访问数据的人。NSA需要 256 位对称密钥。
对于与其他人发送或接收数据，对称密钥不是一个好主意，因为运营商将能够解密数据。因此使用了非对称密钥(asymmetric key)系统。这意味着有一个公钥和一个私钥。您与朋友共享公钥以加密他们发送给您的消息。公钥只能用于加密。然后您使用私钥解密消息。
非对称(Asymmetric)密钥通常比对称密钥长，因为数据会被泄露出去，人们可以抓住它并尝试破解它。钥匙越长，就越不方便。美国国家(National Institute)科学(Science)技术研究院推荐(Technology)使用 2048 位密钥。
AES – 高级加密系统(AES – Advanced Encryption System)
最流行的加密算法，AES是标准的对称密钥加密算法。使用 128 位密钥的AES 加密(AES encryption)对大多数人来说就足够了，但政府机构倾向于使用 256 位或更长的密钥。这是您对USB 闪存驱动器(USB flash drives)或硬盘驱动器等固定数据所需的加密。
RSA – Rivest Shamir Adleman 加密(RSA – Rivest Shamir Adleman Encryption)
RSA是一种公开的或非对称的密钥加密算法。该算法用于不同的安全协议，例如与HTTPS协议一起使用的OpenPGP和SSL 证书(SSL certificates)。您将看到这些协议使用 1024 位或 2048 位密钥。后者更受欢迎。如果您正在寻找安全通信，请查找诸如RSA、HTTPS、PGP、OpenPGP和 GnuPG 之类的术语。
驱动器的最佳免费加密(Best Free Encryption for Drives)
让我们从我们大多数人拥有的最大信息存储库开始，即计算机中的硬盘驱动器。我们推荐两个，具体取决于您使用的操作系统 (OS)。
操作系统：(OS:) Apple OS X Lion 及更新版本
加密算法：(Encryption Algorithm:) XTS-AES 128 位
Apple在保护客户数据方面享有盛誉，因此他们在 OS X 中包含 FileVault(FileVault with OS X)也就不足为奇了。FileVault使用您的登录密码作为加密密码来加密 Mac 的启动驱动器。这确实使得在多用户Mac(Macs)上使用起来更加困难。
必须先解锁驱动器，然后才能使用Mac。如果用户有解锁权限，他们很好。如果他们不这样做，那么具有解锁权限的其他人必须先登录，然后其他用户才能登录并工作。
操作系统：(OS:) Windows、OS X、Linux
加密算法：(Encryption Algorithm: )AES 256 位(AES 256-bit)、Camellia、Kuznyechik、Serpent、Twofish和变体
开源的VeraCrypt非常适合整卷加密。它使用动态加密，这意味着当数据写入磁盘时，它会被加密。在任何时间点，一切都是加密的。
除了免费且可用于Windows、Mac和Linux之外，VeraCrypt还具有在普通加密卷 中创建隐藏加密卷(creating a hidden encrypted volume)的独特功能。
为什么这很重要？想象一下，由于某种原因，您被迫解密驱动器。没关系，继续吧。您所有真正重要的文件都在隐藏的加密卷中。如果创建得当，隐藏卷根本无法检测到，因此如果它似乎不存在，您就不能被迫解密它。这可能超出了大多数人的需要，但它很酷。
最佳免费云加密软件(Best Free Cloud Encryption Software)
操作系统：(OS:) Windows、macOS、Android、iOS
加密算法：(Encryption Algorithm:) AES 256 位和 RSA 4096 位
当我们将文件放入云存储(cloud storage)时，我们也非常信任服务提供商来保护它们。这不像我们的驱动器坐在我们的房子里。我们怎么知道其他人没有访问它或者云服务提供商没有通过它？我们没有。这就是Boxcryptor的用武之地。
Boxcryptor代理存在于您的计算机上，并对发送到您的云存储的所有数据进行加密，使除您之外的任何人都无法读取。当您打开这些文件时，Boxcryptor无需任何额外步骤即可对其进行解密。它只是发生。
Boxcryptor适用于Windows、macOS、Android、iOS，甚至在Microsoft团队中。它将与大多数主要的云存储提供商集成，例如OneDrive、Google Drive、Dropbox、iCloud、SharePoint等。个人可以免费使用一个云提供商和两台设备，这对大多数人来说已经足够了。
最好的带加密的免费安全电子邮件(Best Free Secure Email with Encryption)
操作系统：(OS:)任何带有网络浏览器的计算机，都有适用于 iOS 和Android的应用程序(Android)
加密算法：(Encryption Algorithm: ) PGP
您的电子邮件受(email is protected)ProtonMail的(ProtonMail)技术和法律保护。ProtonMail不会保留活动日志或存储 IP 地址或任何其他可用于识别您身份的数据。将PGP加密功能添加到具有 500MB 的免费存储空间，Protonmail是电子邮件安全的强大力量。
最重要的是，Protonmail总部位于瑞士(Switzerland)，以巧克力、手表和一些世界上最严格的隐私法而闻名。与大多数其他国家相比，这使得任何人都更难强迫ProtonMail发布他们可能拥有的任何数据。(ProtonMail)
最佳免费电子邮件加密插件或扩展(Best Free Email Encryption Add-on Or Extension)
操作系统：(OS: )任何，在Chrome、Edge和Firefox网络浏览器中运行
加密算法：(Encryption Algorithm: ) OpenPGP
还没准备好离开您当前的电子邮件提供商以获取加密？使用Mailvelope，您不必这样做。作为浏览器插件(browser add-on)，Mailvelope让您能够使用GnuPG加密您的电子邮件(encrypt your emails)，并支持 USB 令牌。
您可以将加密密钥保存在USB闪存驱动器上。这可以防止任何人获得您的密钥，除非他们可以物理访问它。Mailvelope可免费供个人使用，适用于Firefox、Chrome、Edge和Brave 浏览器(Brave browsers)，以及所有常见的网络邮件提供商。
操作系统：(OS: ) Windows 10 上的 Outlook
加密算法：(Encryption Algorithm: ) OpenPGP
Encryptomatic 值得一提，因为它提供了一个Outlook插件来为您提供端到端的OpenPGP加密。它可供个人、非营利组织和独立记者免费使用。如果您是Outlook 的狂热用户(Outlook user)，那么您应该自己检查一下Encryptomatic。它使电子邮件加密像右键单击一样简单。
最佳免费消息加密(Best Free Messaging Encryption)
操作系统：(OS:)安卓、iOS、Windows、Mac、Linux
加密算法：(Encryption Algorithm: )信号协议——结合了双棘轮算法(Double Ratchet algorithm)、X3DH、芝麻算法(Sesame Algorithm)、XEdDSA 和 VXEdDSA 签名方案(XEdDSA and VXEdDSA signature schemes)、AES 256 位和 HMAC-SHA256
它最近经常出现在新闻中，我们已经写了关于它的安全消息传递。Signal Private Messenger多年来一直提供免费的端到端加密消息传递(free end-to-end encrypted messaging)。起初，Signal只提供加密的文本消息，但已经发展到包括加密的语音和视频通话。
还有一个适用于Windows、Mac和Linux的(Linux)Signal 桌面应用程序(Signal desktop app)。这是一个完全加密的通信套件，得到了隐私权倡导者Edward Snowden和Twitter创始人 Jack Dorsey 的认可。
最佳免费浏览器加密软件(Best Free Browser Encryption Software)
操作系统：任何使用(OS: )Firefox、Chrome、Edge、Opera、Brave或Tor 浏览器
(Tor browsers)的桌面Android – Firefox、Brave 和 Tor
iOS – Onion Browser
加密算法：(Encryption Algorithm: ) RSA
与网站的所有交互都可以通过Internet传输。在传输过程中，可以在您的计算机和站点托管位置之间的任何位置访问数据。这就是为什么业界如此推动让每个网站都使用超文本传输安全协议 (HTTPS)(Hypertext Transfer Secure Protocol (HTTPS))。
但是，可以通过常规超文本传输协议(Hypertext Transfer Protocol)( HTTP ) 访问许多站点。HTTPS Everywhere不进行任何加密，但如果DuckDuckGo Smarter Encryption数据集中存在站点，它将强制浏览器使用(Smarter Encryption)HTTPS版本的站点。这是一个包含超过 1200 万个已知具有HTTPS版本的站点的数据库。如果站点的某些部分来自不使用HTTPS的(HTTPS)Web 服务器(web servers)，则这些部分将不会被加密。HTTPS Everywhere可以安装在大多数主要的网络浏览器中，并且已经包含在Brave和Tor浏览器中。
最佳加密免费安全证书(Best Free Security Certificate For Encryption)
操作系统：(OS: )任何
加密算法：(Encryption Algorithm: ) RSA
目前只有一个免费的安全证书颁发(free security certificate)机构，所以LetsEncrypt默认胜出。毫无疑问，LetsEncrypt还是(Make)名副其实的。LetsEncrypt颁发的所有TLS证书都必须经过域验证，并且可以使用Certbot ACME客户端自动执行该过程。
超过 2.6 亿个网站正在使用LetsEncrypt授权的证书。浏览LetsEncrypt(LetsEncrypt)的赞助商名单就像浏览硅谷(Silicon Valley)目录一样。
开始加密(Start Encrypting)
结合此处列出的免费加密软件，您和您的数据将比世界上大多数人更安全。任何数量的加密都比没有好，因为犯罪分子会寻找最容易采摘的水果。一旦他们遇到加密，最好是获得丰厚的回报，否则不值得付出努力。所以现在开始加密。
The Best Free Encryption Software in 2021
“Information is the commodity of kings.” The quote is attrіbuted to Tony Robbins, but surely it has been an axiom for аs long as we’ve had royalty. Juѕt as we securе other νaluables like money or jеwelry, we also need to seсure our information.
The best way to secure information is to make it meaningless to others. We do that through encryption. We don’t have the money businesses and governments have to encrypt software, so we’ll have to look at free encryption software. Just because it’s free, doesn’t mean it’s bad. So we present to you the best free encryption software.
About Encryption
You know that encryption means making data unreadable unless you have the key. What you might not know is the different methods, or algorithms, used to encrypt data.
Encryption Keys
Think of an encryption key as an advanced sort of password. The difference is that encryption keys are often very long and random. You’ll often see them referred to as 128-bit or 256-bit keys, a number evenly divisible by 8. The number refers to how many bits make up the key or the length of the key.
While a password gets you into something, an encryption key is also part of the process of encrypting and decrypting data. What the encrypted data looks like is dependent on the key.
For data that only you will access, symmetric keys work best. It’s called symmetric because the key works on both sides – encryption and decryption. Key length isn’t considered as important with this system as you should be the only one with the key and physical access to the data. The NSA requires 256-bit symmetric keys.
For sending or receiving data with other people, a symmetric key isn’t a good idea since the carrier would be able to decrypt the data. So an asymmetric key system is used. This means there is a public key and a private key. You share the public key with your friends to encrypt messages they send to you. The public key can only be used for encryption. Then you use the private key to decrypt the messages.
Asymmetric keys are normally longer than symmetric keys since the data is going out into the wild, where people can grab it and try to crack it. The longer the key, the less convenient it becomes. The National Institute of Science and Technology recommends 2048-bit keys.
AES – Advanced Encryption System
The most popular encryption algorithm, AES is the standard symmetric key encryption algorithm. AES encryption, using 128-bit keys, is sufficient for most people, but government agencies tend to use 256-bit or longer keys. This is the encryption you want for stationary data like USB flash drives, or hard drives.
RSA – Rivest Shamir Adleman Encryption
RSA is a public, or asymmetric, key encryption algorithm. The algorithm is used in different security protocols like OpenPGP and SSL certificates used with the HTTPS protocol. You’ll see these protocols using 1024-bit or 2048-bit keys. The latter is more popular. If you’re looking for secured communications, look for terms like RSA, HTTPS, PGP, OpenPGP, and GnuPG.
Best Free Encryption for Drives
Let’s start with the biggest store of information most of us have, the hard drives in our computers. We’re recommending two, depending on what operating system (OS) you use.
OS: Apple OS X Lion and newer
Encryption Algorithm: XTS-AES 128-bit
Apple has a reputation for being protective of its customers’ data, so it’s no surprise they include FileVault with OS X. FileVault encrypts Mac’s startup drive using your login password as the encryption passphrase. That does make it more difficult to use on multi user Macs.
The drive has to be unlocked before anyone can use the Mac. If the user has unlock permissions, they’re fine. If they don’t, then someone else with unlock permissions must log in first, and then the other user can log in and work.
OS: Windows, OS X, Linux
Encryption Algorithm: AES 256-bit, Camellia, Kuznyechik, Serpent, Twofish, and variants
The open-source VeraCrypt is great for whole volume encryption. It uses on-the-fly encryption, meaning as data is written to the disk, it gets encrypted. At any point in time, everything is encrypted.
Besides being free and available for Windows, Mac, and Linux, VeraCrypt has the unique feature of creating a hidden encrypted volume inside the normal encrypted volume.
Why is this important? Imagine that you are compelled to decrypt your drive for some reason. That’s fine, go ahead. All of your really important files are in the hidden encrypted volume. Created properly, the hidden volume won’t be detectable at all, so if it doesn’t appear to exist you can’t be compelled to decrypt it. That’s probably more than most people need, but it is cool.
Best Free Cloud Encryption Software
OS: Windows, macOS, Android, iOS
Encryption Algorithm: AES 256-bit and RSA 4096-bit
When we put our files into cloud storage, we also put a lot of trust in the service provider to protect them. It’s not like we have the drive sitting in our house. How do we know someone else hasn’t accessed it or that the cloud service provider isn’t going through it? We don’t. That’s where Boxcryptor comes in.
The Boxcryptor agent lives on your computer and encrypts all data being sent up to your cloud storage, making it unreadable to anyone but you. When you open those files, Boxcryptor decrypts them without any extra steps. It just happens.
Boxcryptor works on Windows, macOS, Android, iOS, and even within Microsoft teams. It will integrate with most major cloud storage providers such as OneDrive, Google Drive, Dropbox, iCloud, SharePoint, and more. It’s free for individuals to use with one cloud provider and on 2 devices, which is enough for most people.
Best Free Secure Email with Encryption
OS: Any computer with a web browser, has apps for iOS, and Android
Encryption Algorithm: PGP
Your email is protected by ProtonMail with technology and law. ProtonMail doesn’t keep logs of the activity or store IP addresses or any other data that may be used to identify you. Add the PGP encryption capability to that with 500MB of free storage and Protonmail is a formidable force for email security.
On top of that, Protonmail is based in Switzerland, known for chocolate, watches, and some of the strongest privacy laws in the world. That makes it more difficult for anyone to compel ProtonMail to release whatever data they may have, compared to most other countries.
Best Free Email Encryption Add-on Or Extension
OS: Any, runs in Chrome, Edge, and Firefox web browsers
Encryption Algorithm: OpenPGP
Not ready to leave your current email provider to get encryption? With Mailvelope, you don’t have to. Functioning as a browser add-on, Mailvelope gives you the ability to encrypt your emails with GnuPG and has USB token support.
You can keep your cryptographic key on a USB flash drive. This prevents anyone from getting your key unless they have physical access to it. Mailvelope is free for personal use, works in Firefox, Chrome, Edge, and Brave browsers, and all common webmail providers.
OS: Outlook on Windows 10
Encryption Algorithm: OpenPGP
Encryptomatic deserves an honorable mention as it provides an Outlook add-in to give you end-to-end OpenPGP encryption. It’s free for personal use, non-profits, and independent journalists. If you’re an avid Outlook user, you owe it to yourself to check out Encryptomatic. It makes email encryption as simple as a right-click.
Best Free Messaging Encryption
OS: Android, iOS, Windows, Mac, Linux
Encryption Algorithm: Signal Protocol – combines Double Ratchet algorithm, X3DH, Sesame Algorithm, XEdDSA and VXEdDSA signature schemes, AES 256-bit, and HMAC-SHA256
It’s been in the news a lot lately and we’ve written about it for secure messaging. Signal Private Messenger has provided free end-to-end encrypted messaging for years. At first, Signal only offered encrypted text messaging, but has grown to include encrypted voice and video calling.
There’s also a Signal desktop app for Windows, Mac, and Linux. It’s a fully encrypted communications suite endorsed by privacy advocate Edward Snowden and Twitter founder Jack Dorsey.
Best Free Browser Encryption Software
OS: Any desktop using Firefox, Chrome, Edge, Opera, Brave, or Tor browsers
Android – Firefox, Brave, and Tor
iOS – Onion Browser
Encryption Algorithm: RSA
All interactions with a website can be transmitted over the Internet. During transmission, the data could be accessed anywhere between your computer and where the site is hosted. That’s why there’s such a push in the industry to make every website use the Hypertext Transfer Secure Protocol (HTTPS).
However, many sites can be accessed through regular Hypertext Transfer Protocol (HTTP). HTTPS Everywhere doesn’t do any encryption but it will force the browser to use the HTTPS version of a site if it exists in the DuckDuckGo Smarter Encryption dataset. That’s a database of over 12 million sites that are known to have HTTPS versions. If parts of a site come from web servers not using HTTPS, those parts will not be encrypted. HTTPS Everywhere can be installed in most major web browsers and is already included in the Brave and Tor browsers.
Best Free Security Certificate For Encryption
OS: Any
Encryption Algorithm: RSA
At this time there’s only one free security certificate authority, so LetsEncrypt wins by default. Make no mistake, LetsEncrypt is still worthy of the title. All TLS certificates issued by LetsEncrypt must be domain-verified and the process can be automated using the Certbot ACME client.
Over 260 million websites are using certificates authorized by LetsEncrypt. Looking through the list of sponsors for LetsEncrypt is like looking through a Silicon Valley directory.
Start Encrypting
With some combination of the free encryption software listed here, you and your data will be more secure than most people in the world. Any amount of encryption is better than none because criminals look for the easiest fruit to pick. As soon as they come across encryption it better be a juicy payoff or it’s not worth the effort. So start encrypting now.
