Encrypt drives, partitions & USB storage.
Keep private data private.

Yes. Easy Mode guides you step by step through creating a protected area, with recommended settings so you do not have to make every technical choice yourself. You can get started without first learning encryption terminology. When you want more control, switch to Advanced Mode and adjust the settings yourself.

Yes. Your encrypted areas stay locked until you open them. DriveCrypt makes the selected data available while you work and encrypts changes again as they are saved, so you can use your files in the usual way. Once you close the area, its contents are locked from applications and other users.

Use the 30-day limited trial to get familiar with DriveCrypt and see whether it fits the way you work. Try the setup process and the protection features that matter to you before deciding to buy. The trial is available through the download area.

DriveCrypt protects private data areas and storage devices. DriveCrypt Plus Pack is designed to encrypt the Windows operating system. Together, the products cover both needs: Plus Pack protects the system, while DriveCrypt secures additional areas, containers and removable storage. DriveCrypt is compatible with Windows 11.

Choose what you want to protect: DriveCrypt creates encrypted containers, protects partitions and hard drives, and secures USB sticks and external storage. For another layer of discretion, you can conceal an encrypted area inside a suitable WAV audio file. This gives you the choice between a separate private workspace and protecting entire storage devices.

Choose an access method to suit your security needs: a password may be sufficient, or you can combine it with a keyfile or USB token. A keyfile is a file that acts as an additional access key. With these combinations, an unauthorised person may need more than just the password to open the protected area.

The software licence is a lifetime licence for one computer and does not expire. You can continue using the version you purchased. Support and upgrade rights are separate: they last for one year and can be renewed so you continue to receive assistance and new versions.

Plausible deniability means a hidden container can be created inside an outer container or partition. The outer password opens the visible area and the data stored there; a different password opens the confidential hidden area. If you are pressured to reveal a password, you can provide the outer password while keeping the confidential data in the hidden area.

Yes. If you need help with installation, setup or everyday use, you can contact SecurStar support directly. You are not left to solve technical questions on your own; our team understands encryption and DriveCrypt. Support and upgrade rights last one year and can be renewed separately from the lifetime software licence.

Short answer: Under this model, the expected average search takes about 4,867 years. A complete search through all 19 DriveCrypt options takes about 4,871 years.

Assumptions: Triple Blowfish with three keys of up to 448 bits each gives a key space of 2^1,344 possible key combinations. The model assumes 1,000 computers, each checking one billion keys per second—a combined rate of 1,000 billion checks per second. Computing power increases by 20% each year in the model; historically, performance gains have ranged roughly from 10% to 20%, depending on the period and metric.

How to check the calculation: One billion checks per second on 1,000 computers equals 10¹² checks per second. That is about 3.16 × 10¹⁹ checks in the first year. With computing power growing by 20% each year, cumulative work after t years is approximately 3.16 × 1019 × (1.2t − 1) ÷ 0.2. A complete search of one 1,344-bit key space therefore takes about 4,855 years.

Why do the 19 options not multiply the calendar time by 19? At constant performance, 19 equally sized options would require 19 times the work. In this model, however, computing power keeps growing each year. A complete search through all 19 options therefore takes about 4,871 years—around 16 years more than a complete search of one option. If each option is equally likely and keys are checked evenly, the expected average is about 4,867 years.

These figures are a theoretical model using an assumed checking rate, not a benchmark for a specific computer or a measured DriveCrypt implementation. The added obstacles—first detecting that data is hidden and then identifying the correct option—and DriveCrypt’s built-in anti-brute-force mechanisms are not included. DriveCrypt also slows automated password attempts. A weak or reused password can still be guessed faster.

DriveCrypt has not been cracked to date. Over the past 20 years, SecurStar has offered more than €100,000 in total prize money for successful attacks on DriveCrypt; no successful proof has been submitted. This reflects our commitment to strong encryption and continuous development. As with any security software, you should also choose a strong, unique password and keep your access credentials safe.

No. DriveCrypt contains no backdoor for SecurStar or government authorities. SecurStar was founded in Germany because we want to provide strong encryption without government-mandated backdoors. Germany supports strong encryption, which fits our commitment to protect customer data without compromise. An additional master access method exists only if you configure it yourself in advance. Keep your password and, where applicable, keyfile or token safe: without valid credentials, an encrypted area cannot be opened.

BitLocker is a straightforward way to encrypt an entire drive. DriveCrypt gives you more flexibility for selected data areas: encrypt containers, partitions, data drives and USB sticks; unlock and lock protected areas whenever you need to; and conceal data, including in hidden containers or suitable WAV audio files. Even after Windows starts, your DriveCrypt areas stay locked until you open them. DriveCrypt Plus Pack encrypts the entire computer, including the operating system, and protects startup with authentication before Windows loads. If you want straightforward full-drive encryption, BitLocker is a direct option. If you want more control and additional privacy features, DriveCrypt Plus Pack is an alternative. Combining DriveCrypt Plus Pack with DriveCrypt protects the entire computer while keeping selected private areas separately locked after you sign in to Windows.

On many personal Windows devices, the BitLocker recovery key is backed up to the Microsoft account. The account holder can retrieve it there; under certain circumstances, stored account data may also be accessible to Microsoft or government authorities. For work or school devices, the organisation’s IT department often manages the key. With DriveCrypt and DriveCrypt Plus Pack, no key is sent to Microsoft or SecurStar or stored in a cloud account. You keep control of your access credentials. SecurStar cannot open your encrypted data and has no backdoor.

A keyfile is a specially created key file that lets another authorised user open an encrypted area without you sharing your own volume password. The keyfile can itself be protected with a password. Depending on the configuration, you can limit its validity period or allow use only during selected hours. This lets you grant controlled access and revoke a keyfile later.

DriveCrypt can conceal an encrypted volume inside suitable WAV audio files. The manual specifies uncompressed 16-bit stereo audio and a minimum size of 2 MB. Depending on the capacity selected, DriveCrypt uses part of the available audio space. The concealed data remains encrypted; steganography adds another layer by hiding the presence of a protected area in the file.

DriveCrypt encrypts and decrypts data transparently in the background. The DriveCrypt help says users usually notice no performance loss; depending on the computer, a measurable difference of around 1–3% may occur. AES hardware acceleration is available on supported processors. Containers and data partitions behave differently: on conventional hard drives, partition transfers are generally faster than container-file transfers.

Yes. DriveCrypt supports suitable USB tokens and PKCS#11-compatible security tokens. Keyfiles can also be stored on USB sticks. Depending on the setup, inserting the device can prompt for a password; removing it dismounts the associated protected area. If files on the volume are still open, dismounting may take a short time.

SecurStar cannot reset a forgotten DriveCrypt password. Use an alternative access method configured in advance—such as an authorised keyfile or another user credential—if you have set one up. Without a valid password, keyfile or token, the encrypted area cannot be opened. Keep your credentials and a secure backup in separate, reliable places.

DriveCrypt can protect partitions, but converting a partition may overwrite existing data. Back up your files first and carefully verify the selected partition in the wizard. If you are unfamiliar with partitioning, start with a container: it is created as a file and provides a clearly defined protected workspace.