Encryption

Bluetooth itself as a technology isn't secure, it's not only about the implementation, there are some serious flaws in the design itself. Bluetooth isn't a short range communication method - just because you're a bit far doesn't mean you're safe. Class I Bluetooth devices have a range up to 100 meters. Bluetooth isn't a mature communicate method (security-wise). With smart phones, it has turned into something totally different from what it was meant to be. It was created as a way to connect phones to peripherals. Please don't use Bluetooth for accessing Level 1 data.

If you do need to use Bluetooth devices please do the following

• Enable Bluetooth functionality only when necessary.
• Enable Bluetooth discovery only when necessary.
• Pair devices using a secure long passkey.
• Keep paired devices close together and monitor what's happening on the devices.
• Never enter passkeys or PINs when unexpectedly prompted to do so.
• Regularly update and patch Bluetooth-enabled devices.
• Remove paired devices immediately after use.

Here is the Windows documentation.

Here is the Macintosh documentation 

Disk encryption safely protects all the data stored on a hard drive. When the entire hard disk is encrypted, everything on that disk is protected if the computer is lost or stolen. CSUN recommends the following drive encryption programs for non-portable storage devices. Select the appropriate link for more information on how to use each program:

• Windows BitLocker works with Windows 7/8/10 and Server
• FileVault works with Mac OS X

E-mails may be encrypted and/or authenticated to prevent the contents from being read by unintended recipients. Please ask your local tech if you believe you need to encrypt e-mail messages.

The following encryption methods are available for protecting files and folders stored on portable storage devices such as, USB sticks, external hard drives and other mobile devices. Select the appropriate link below for more information on how to use each program:

• 7-Zip is an open-source, free utility that provides AES 256-bit encryption for files and folders under Windows 10/8/7 and Windows Server 2012/2008
• Disk Utility encryption is built into Macintosh OS X
• Bit Locker to Go is available for Windows Users. 
• Symantec Endpoint Encryption (formally known as PGP) is a commercial product that has strong encryption and has tools for sharing encrypted files across teams.

There are storage devices that use hardware based encryption.

• Kingston DataTraveler is one that we recommend. DataTraveler has the necessary level of encryption, works with both Windows and Macs and is affordable. Available at the Campus Bookstore.
• IronKey is the best encrypted storage devices on the market. IronKey is encrypted all of the time and works with both Windows and Macs.

For more information: Encrypted Removable Media (PDF).

File encryption is designed to protect stored (at rest) files or folders. 

Additional information is available by clicking on each product name. 

Caution: Data in encrypted files are not retrievable if the encryption key is lost.

Following are examples of file encryption software to use when encrypting your data:

• 7-Zip is an open-source, free utility that provides AES 256-bit encryption for files and folders under Windows 10/8/7 and Windows Server 2012/2008
• PGP is a product that is a recommended commercial product that can be for department level sharing of Level 1 data. 
• Disk Utility encryption software is built into MAC OS X 

The following productivity tools let you password-protect and/or encrypt individual files:  

• Microsoft Office 2010/2013/2016 - Password protection, encryption, and access permissions for documents, workbooks, and presentations
• Microsoft Office Mac 2011 - Password protection only (no encryption) for Word documents
• Microsoft Office Mac 2016 - Password protection only (no encryption) for Word documents
• Adobe Acrobat 10 and Later - Password protection and encryption for PDF files

It is possible to encrypt entire networks, which may be desirable in certain situations. If you think this may be relevant to you, please contact your local tech for assistance.