I do work for a couple clients that might occasionally involve sensitive personal data. Sometimes on-site and sometimes off. De-identification is always preferable, of course, but sometimes might not be possible. I have a hardware-encrypted external hard drive, FIPS 140-2 Level 3. When doing work, I would want to decrypt and access only one client's data at a time---not everything on the drive. I had envisioned creating separate VeraCrypt containers on that hard drive, one for each client. Decrypt and mount the drive, then decrypt and mount a client-specific container. However, as far as I can tell, VeraCrypt requires Administrator privileges on the machine where one wishes to decrypt and mount a container. I don't have those privileges on clients' computers. I've looked a little into portable Cryptomator on portapps, but I think that presents the same problem. Any experience or suggestions for a completely portable approach to encryption? Thanks.
------------------------------
Christopher Ryan
Agency Statistical Consulting, LLC
------------------------------