您的手机和计算机很可能使用PIN 码(PIN)、密码或生物特征验证来(biometric authentication)保护，对吗？保护您的存储设备(protect your storage device)也是一种很好的做法，尤其是当它包含机密或私人文件时。这样，您可以防止未经授权访问您的文件——即使您丢失了驱动器或它被盗。
保护硬盘驱动器所需的只是您的个人计算机或笔记本电脑。Windows和Mac具有内置加密工具，可让您在存储设备上设置密码。继续以下部分，了解如何在计算机的外部硬盘驱动器上设置密码。
(Encrypt)在Windows 10上(Windows 10)加密外部驱动器(External Drive)
在Windows 10(Windows 10)计算机上加密外部存储设备需要您手动选择加密方法、加密模式、备份恢复密钥并创建完美（阅读：安全）密码。看起来工作量很大，但很容易。我们将从头到尾引导您完成整个过程。
首先，您需要在您的计算机上启用BitLocker（Windows 内置加密工具）。将硬盘插入您的 PC 并按照以下步骤操作。
注意：(Note:)您无法在运行Windows 10 家庭(Home)版的电脑上加密驱动器，因为操作系统不支持BitLocker。升级到Windows 10 专业版(Pro)、企业版(Enterprise)或教育版以使用BitLocker。
1.启用BitLocker(1. Enable BitLocker)
启动文件资源管理器(File Explorer)，右键单击外部驱动器，然后选择打开 BitLocker(Turn on BitLocker)。
当Windows(Windows)启动BitLocker加密窗口时，请勿从 PC 上拔下或移除驱动器。
2. 创建密码(2. Create a Password)
选中“使用密码解锁驱动器”框并输入您的首选密码。在提供的对话框中重新输入密码，然后选择(Re-enter)下一步(Next)继续。
您的密码必须满足下列条件，否则您将收到错误消息：
- 应至少包含 8 个字符。
- 必须至少有一个大写字母。
- 必须至少有一个小写字母。
- 必须至少有一个数字、符号或空格。
3. 保存您的恢复密钥(3. Save Your Recovery Key)
Windows 将自动为外部驱动器生成恢复密钥。恢复密钥是备用密钥，可在您忘记密码时解锁您的加密驱动器。
“打印(Print)恢复密钥”选项将启动一个新窗口，您可以在其中将恢复密钥打印在纸上。如果您选择“保存(Save)到文件”选项，Windows会将恢复密钥编码到文本文件中。将文件保存(Save)在 PC 上您首选的文件夹/位置，然后选择Save。
当您收到“您的恢复密钥已保存”或“您的恢复密钥已打印”的成功消息时，选择下一步(Next)继续。
4.选择加密方式(4. Choose Encryption Method)
BitLocker有两种加密方法：Used Disk Space Encryption和Full Disk Encryption。
如果您的外部驱动器是新的并且从未在另一台计算机上使用过，请选择“仅加密已用磁盘空间”。BitLocker将加密驱动器上的扇区，以便将来复制到驱动器的新数据自动加密。但是，如果您使用此方法加密以前使用过的驱动器（即使它是空的），则有人可以访问已删除或移动的数据。
这是因为BitLocker加密引擎不会将包含已删除数据的扇区识别为已用磁盘空间。因此(Hence)，它不会加密这些扇区。
如果要在已使用的外部驱动器上设置密码，请选择加密整个驱动器(Encrypt entire drive)。这将提示BitLocker加密驱动器上的所有扇区和数据——甚至是您删除的文件。
请注意，已用磁盘空间(Disk Space)加密通常更快；这需要几秒钟或几分钟，具体取决于驱动器上的数据量。另一方面，全盘加密可能会在完成前运行数小时。(Full Disk Encryption)
5.选择加密模式(5. Choose Encryption Mode)
如果您将仅在您的计算机或运行Windows 10（版本 1511 或更高版本）的设备上使用外部驱动器，请选择新加密模式。(New encryption mode)
如果您不确定，或者您认为您可能需要在运行旧Windows版本的设备上访问驱动器，请选择兼容模式(Compatible mode)并继续。
6.开始加密(6. Start Encrypting)
(BitLocker)当您选择“开始加密(Start encrypting)”按钮时， BitLocker将开始对驱动器进行加密。
如前所述，该操作可能会持续几分钟或几小时，具体取决于驱动器的大小和它所保存的数据。
请勿在未暂停加密的情况下从 PC 中移除驱动器。这样(Doing)做可能会损坏驱动器。如果您在加密过程中需要紧急使用驱动器，请选择暂停(Pause)并拔下驱动器。
请注意，在加密完成之前，您的文件和驱动器不会受到保护。等到(Wait)您收到如下所示的“加密(Encryption)完成”成功消息。
当您在 PC 上弹出加密驱动器或尝试在另一台 PC 上访问它时，屏幕上会出现提示您输入驱动器密码的BitLocker窗口。
在 macOS 上加密外部驱动器
在 macOS 上的外部驱动器上设置密码是您可能要做的最简单的事情。将驱动器插入Mac并按照以下步骤操作：
1. 右键单击驱动器（检查位置(Locations)部分）并选择加密(Encrypt)或Encrypt <Drive Name>。
注意：如果您的(Note:)Mac上没有显示外部驱动器，或者缺少“加密”(Encrypt)选项，您可能需要将驱动器格式化为macOS 支持的文件系统(file system that macOS supports)。请参阅此外部硬盘驱动器故障排除指南(external hard drive troubleshooting guide)以了解更多信息。
2. 输入密码，重新输入密码，然后输入密码提示。
专业提示：(Pro Tip:) 单击“(Click)加密(Encryption)密码”对话框旁边的钥匙图标以启动“加密密码助手(Encryption Password Assistant)” 。该工具将建议随机密码或帮助您创建一个强大的自定义密码。
3. 选择加密磁盘(Encrypt Disk)。
macOS 加密引擎将在驱动器上开始加密。此操作可能需要几秒钟或几分钟，具体取决于驱动器的内容和大小。
加密完成后，弹出并重新插入加密驱动器，或将其插入另一台 Mac(Mac)。屏幕上会弹出一个密码输入窗口；输入密码并选择解锁(Unlock)以获取访问权限。
忘记加密密码(Encryption Password)时会发生什么
强密码(Strong passwords)非常安全，但通常很容易忘记。如果您不记得加密驱动器的密码，您仍然可以访问内容。我们将向您展示如何在Windows和 macOS 上进行操作。
在 Windows 上：使用恢复密钥(On Windows: Use the Recovery Key)
还记得在加密驱动器时打印或保存到 PC 的恢复密钥吗？如果您忘记了加密密码，这就是您访问驱动器所需的全部内容。
前往保存恢复文件的位置，双击文本文件以访问其内容，然后复制“恢复密钥(Recovery Key)”部分中的数字。
将驱动器插入您的 PC 并等待BitLocker密码输入窗口出现在屏幕上。选择更多选项(More options)，然后选择输入恢复密钥(Enter recovery key)。
最后，将恢复密钥粘贴到对话框中，然后选择Unlock。如果您打印了恢复密钥，请检索打印输出，键入恢复密钥，然后选择解锁(Unlock)。
您现在应该能够在文件资源管理(File Explorer)器中访问该驱动器。如果您仍然不记得密码，则必须创建一个新密码。右键单击驱动器并选择Manage BitLocker。
[19-管理-bitlocker-windows-10.png]
在“可移动数据驱动器”部分找到外部驱动器，然后选择关闭 BitLocker(Turn off BitLocker)。
之后(Afterward)，从头开始加密驱动器并使用新密码。
在 Mac 上：禁用 FileVault(On Mac: Disable FileVault)
与Windows不同，您无法使用恢复密钥访问 macOS 上的加密驱动器。唯一的解决方法是关闭FileVault —(FileVault—the) macOS 加密引擎。前往System Preferences > Security & Privacy > FileVault并选择Turn Off FileVault。
这会暂时禁用所有内部和外部驱动器上的任何加密。启动Finder，您无需输入密码即可访问驱动器。但是如果没有旧密码，您将无法解密或创建新的加密密码。重新启用FileVault将使用忘记的密码自动重新加密驱动器。
第三方软件(Software)和硬件替代品(Hardware Alternatives)
如果您在使用这些内置工具时遇到困难，请求助于可靠的第三方解决方案，例如VeraCrypt。或者，您可以购买带有指纹读取器的硬件加密存储设备或外部驱动器(external drives with fingerprint readers)。这些驱动器提供同样安全的无密码生物特征加密形式，更易于使用和设置。
How to Set a Password for an External Hard Drive
Your phone and computer are most likely secured with a PIN, password, or biometric authentication, right? It’s also good practice to protect your storage device, especially if it contains confidential or private files. That way, you can prevent unauthorized access to your files—even when you lose the drive or it gets stolen.
All you need to protect your hard drive is your personal computer or laptop. Windows and Mac have built-in encryption tools that let you set a password on your storage devices. Proceed to the sections below to learn how to set a password on an external hard drive on your computer.
Encrypt an External Drive on Windows 10
Encrypting an external storage device on a Windows 10 computer requires you to manually choose an encryption method, encryption mode, backup a recovery key, and create a perfect (read: secure) password. It may seem like a lot of work, but it’s very easy. We’ll walk you through the entire process from start to finish.
First, you need to enable BitLocker—Windows built-in encryption tool—on your computer. Plug the hard drive into your PC and follow the steps below.
Note: You can’t encrypt a drive on PCs running Windows 10 Home edition because the operating system doesn’t support BitLocker. Upgrade to Windows 10 Pro, Enterprise, or Education to use BitLocker.
1. Enable BitLocker
Launch the File Explorer, right-click the external drive, and select Turn on BitLocker.
Do not unplug or remove the drive from your PC while Windows starts the BitLocker encryption window.
2. Create a Password
Check the box that reads “Use a password to unlock the drive” and enter your preferred password. Re-enter the password in the provided dialog box and select Next to proceed.
Your password must fulfill the criteria listed below, or else you’ll get an error message:
- Should contain at least 8 characters.
- Must have at least one uppercase letter.
- Must have at least one lowercase letter.
- Must have at least one number, symbol, or space.
3. Save Your Recovery Key
Windows will automatically generate a recovery key for the external drive. The recovery key is a spare key that unlocks your encrypted drive if you ever forget the password.
The “Print the recovery key” option will launch a new window where you’ll be able to print the recovery key on paper. If you choose the “Save to a file” option, Windows will encode the recovery key in a text file. Save the file in your preferred folder/location on your PC and select Save.
When you get a success message that “Your recovery key has been saved” or “Your recovery key was printed,” select Next to proceed.
4. Choose Encryption Method
BitLocker has two encryption methods: Used Disk Space Encryption and Full Disk Encryption.
Select “Encrypt used disk space only” if your external drive is new and has never been used on another computer. BitLocker will encrypt a sector on the drive such that new data copied to the drive in the future is automatically encrypted. However, if you encrypt a previously-used drive (even if it’s empty) using this method, someone could gain access to deleted or moved data.
That’s because the BitLocker encryption engine doesn’t recognize sectors containing deleted data as used disk space. Hence, it wouldn’t encrypt such sectors.
If you want to set a password on an external drive that’s already in use, select Encrypt entire drive. That’ll prompt BitLocker to encrypt all the sectors and data on the drive—even files that you deleted.
Note that Used Disk Space encryption is generally faster; it takes a couple of seconds or minutes, depending on how much data is on the drive. Full Disk Encryption, on the other hand, could run for hours before completion.
5. Choose Encryption Mode
Select New encryption mode if you’ll be using the external drive only on your computer, or on devices running Windows 10 (version 1511 or later).
If you’re unsure, or you think you may need to access the drive on devices running older Windows versions, select Compatible mode and proceed.
6. Start Encrypting
BitLocker will start the encryption of the drive when you select the Start encrypting button.
As mentioned earlier, the operation could run into minutes or hours, depending on the size of the drive and data it holds.
Do not remove the drive from your PC without pausing the encryption. Doing so could damage the drive. If you need to urgently use the drive during the encryption process, select Pause and unplug the drive.
Note that your files and the drive aren’t protected until the encryption is complete. Wait until you get an “Encryption complete” success message like the one below.
When you eject the encrypted drive on your PC or try to access it on another PC, a BitLocker window prompting you to enter the drive’s password will appear on the screen.
Encrypt an External Drive on macOS
Setting a password on an external drive on macOS is the easiest thing you may ever have to do. Plug the drive into your Mac and follow these steps:
1. Right-click the drive (check the Locations section) and select Encrypt or Encrypt <Drive Name>.
Note: If the external drive isn’t showing up on your Mac, or the Encrypt option is missing, you may need to format the drive to a file system that macOS supports. Refer to this external hard drive troubleshooting guide to learn more.
2. Enter a password, re-enter the password, and type in a password hint.
Pro Tip: Click the key icon next to the Encryption password dialog box to launch the Encryption Password Assistant. The tool will suggest random passwords or help you create a strong custom password.
3. Select Encrypt Disk.
The macOS encryption engine will start encryption on the drive. This operation may take a couple of seconds or minutes, depending on the drive’s content and size.
When the encryption is complete, eject and reinsert the encrypted drive, or plug it into another Mac. A password entry window will pop up on the screen; enter the password and select Unlock to gain access.
What Happens When You Forget The Encryption Password
Strong passwords are pretty secure but often easy to forget. If you can’t remember the password to your encrypted drive, you can still very much access the content. We’ll show you how to go about it on Windows and macOS.
On Windows: Use the Recovery Key
Remember the recovery key that you printed or saved to your PC while encrypting the drive? That’s all you need to access the drive if you forget the encryption password.
Head to the location where you saved the recovery file, double-click the text file to access its content, and copy the numbers in the Recovery Key section.
Plug the drive into your PC and wait for the BitLocker password entry window to appear on the screen. Select More options and select Enter recovery key.
Finally, paste the recovery key in the dialog box and select Unlock. If you printed the recovery key, retrieve the printout, type the recovery key, and select Unlock.
You should now be able to access the drive in File Explorer. If you still can’t remember the password, you’ll have to create a new one. Right-click the drive and select Manage BitLocker.
[19-manage-bitlocker-windows-10.png]
Locate the external drive in the “Removable data drives” section and select Turn off BitLocker.
Afterward, encrypt the drive from scratch and use a new password.
On Mac: Disable FileVault
Unlike Windows, you can’t access an encrypted drive on macOS with a recovery key. The only workaround is to turn off FileVault—the macOS encryption engine. Head to System Preferences > Security & Privacy > FileVault and select Turn Off FileVault.
That temporarily disables any encryption on all internal and external drives. Launch Finder and you’ll have access to the drive without entering a password. But you won’t be able to decrypt or create a new encryption password without the old password. Re-enabling FileVault will automatically re-encrypt the drive with the forgotten password.
Third-Party Software and Hardware Alternatives
If you’re having difficulties using these built-in tools, resort to reliable third-party solutions like VeraCrypt. Alternatively, you could buy hardware-encrypted storage devices or external drives with fingerprint readers. These drives offer an equally secure form of password-free biometric encryption that’s way easier to use and set up.
