Full Disk Encryption or FDE is a sure way of protecting your information when the computer has been switched off. Usually, computers employ Pre-Boot Authentication. A prompt is displayed before the computer is allowed to boot, prompting the user to enter their password or passphrase to decrypt the drive and allow the system to boot.
A system that is available on most laptops and PCs but the effectiveness depends on how the process works and if the password can be reset by resetting or reflashing the BIOS.
File-Based Encryption or FBE keeps the information encrypted during the system’s operation and the files are only decrypted when accessed. The drive usually has a time out feature that re-encrypts the file after a set amount of time or removes the decryption key from the cache, therefore, rendering the file unreadable, until the next time the file is accessed. If the file is removed from the computer it will not be able to be read until the decryption keys and or software is installed on that machine.
GPS Full Disk Encryption + File-Based Encryption this is an ultra-secure lock. Not only is the drive encrypted at boot and the important files remain encrypted during the system’s operation. The decryption key is based upon the device’s location. The sort of encryption is best for stationary computers that do not move. If the device is moved even an inch, the encryption key changes as it’s based upon the X+Y location of the unit.
Fingerprint Access and Facial Login isn’t usually recommended as a primary way of accessing your system as these measures have no duress leeway. With a password, you have the ability to enter the details wrongly or your ability to forget the details. Your unable to misremember your fingerprint nor your face….without some form of skin dissolving acid.