In keeping with the faithful mantra about “no silver bullet” in the security world, let me highlight a crucial piece of the laptop security puzzle: encryption.

Encryption is a must when it comes to effective mobile data security. Key factors to keep in mind include:

1. Use a strong key (password, that is, pass PHRASE). Do not use “hello” or “password” as your password. Mix upper case, lower case, and numerical characters in. Also use symbols. A phrase is best: “Dan like$ to bloG each WEEK” is an example pass phrase.
2. Keep the key in a safe place. Your memory is a good spot (in your head). Don’t just write the password on paper and tape it to the machine. Think I’m kidding? People actually do this.
3. Use at least 128-bit encryption with a solid algorithm. Commercial-grade encryption software will provide this.
4. Be sure automatic encryption is in place. That is, don’t assume files are encrypted. Either do Full Disk Encryption (FDE) or use the encryption software utilities to verify what files/folders are being encrypted–and that they are re-encrypted after being decrypted for use, after a reboot, etc.

And, like all else, even encryption is not a silver bullet. This must be kept in mind. Poorly managed keys, sloppy/incomplete implementation, or undue obtrusiveness to users (causing them to try to circumvent) are primary ways that encryption is crippled. Use it, and use it correctly!