You explained this a lot better than a lot of people!!! Thx. I'm a bit disappointed. I want something that will require a password to access. Then if i restart my computer it logs again. or after a few minutes it locks again. Basically even if a hacker doesn't have your admin account, if a user has access to this and it REMAINS MOUNTED, all your sensitive data is available. This sucks!!!
I think there are use cases that Key Manager Mount on Boot have value. If you use a Power Schedule, knowing you're not going to need the NAS while at work or while sleeping, AND you're not allowing access to the NAS from outside your LAN; then, the encryption value add is prevention of data access resulting from physical theft of the NAS (assuming the USB stick isn't left plugged in).
I've already discovered how to encrypt "shared folders" on my NAS. And this can be done by anyone who really wants to explore their Synology NAS to unlock all the capabilities those packages can provide. But what if you only want to encrypt a sub-folder with a shared folder? Can that even be done? And if so how would you do it?
@@WunderTechTutorials Thanks I thought that might be the case. My solution was to create a shared folder with the same name as my subfolder, then move all the files to the new share and encrypt it. After I just deleted the old sub-folder once all the files had moved over.
Interesting video - in fact I only see the encryption as a layer , in case the NAS gets stolen. One has to assume in case it gets stolen, the USB drive gets stolen too, means in both cases you are left with the security of the user account?
You can get an encrypted USB drive. I'm not sure how well it will work on something like this. I have a lexor which uses my thumb print to unlock. Some have a pin code. The average thief would probably not connect the dots. They just want to make money off of it.
Is it not possible to have the mounted folder automatically unmounted, for example at a given time of day or after a certain time of inactivity? Not being able to do so feels just like leaving home forgetting to lock the door...
I agree with your analogy about leaving home and forgetting to lock the door. As far as I know, no, there's no way to automatically unmount it through Synology's GUI. However, if you're comfortable in the CLI, it's probably easy to set up a script that does it.
@@WunderTechTutorials Thank you. Unfortunately I do not even know what CLI is, and scripting is even further above my knowledge, so that will be a tough one…
@@Hoggormen Sorry, CLI is command-line interface. Yes, it's probably best to stay out of it (I wouldn't use it for this either). The only other suggestion would be to set up start up/shut down schedules (which will automatically unmount it), but I'm not sure it's worth it.
Hi. Great guides, really appriciate them :) I have a question on backing up encrypted foldes til another synology. If I set up encryption for a number of documents, I wosuld want those same documents to stay encrypted on the backup synology as well right. So how do I do that? Do I just create an encrypted folder on the destination synology, and set up hyperbackup between the two? Or is there something within the hyperback process I need to set up? I hope you can help out on this :)
I will give the disclaimer that I haven't done an encrypted folder to encrypted folder backup from NAS to NAS, but you have to keep in mind that encrypted folders need to be "mounted" and when they're mounted, act like any other shared folder. Therefore, if both folders will stay mounted to ensure they back up, you are essentially using a regular shared folder (unless you intend on unmounting them regularly).
@@WunderTechTutorials Hi, thank you. You'r right, my encrypted documents will be accessible on both NAS as long as they are mounted. I think my thinking is, if someone where to steal my NAS, I want those documents to be inacceaaible. And if so, the documents have to be encrypted on both NAS. If a thief were to steal both my NAS in my house, it would not make much sense to have the documents encrypted on one NAS, but not the other. But since you are not brining up any other options, like doing the encryption in HyperBackup, I guess it's a matter of creating an encrypted folder on both NAS, and set up backup between them. Thank you :)
@@SimonSelmer If you asked me how I would do it, I would use Hyper Backup. I just didn't bring it up as I imagined you wanted to use something like Shared Folder Sync or Snapshot Replication :-)
@@WunderTechTutorials I mean if I move them, ofcourse, in case I want to buy another Synology. But after some tests and looking at the downloaded key file, I don't think the NAS's hardware key is used so I think it's fine to move the HDDs to another Synology NAS.
You explained this a lot better than a lot of people!!! Thx. I'm a bit disappointed. I want something that will require a password to access. Then if i restart my computer it logs again. or after a few minutes it locks again. Basically even if a hacker doesn't have your admin account, if a user has access to this and it REMAINS MOUNTED, all your sensitive data is available. This sucks!!!
I think there are use cases that Key Manager Mount on Boot have value. If you use a Power Schedule, knowing you're not going to need the NAS while at work or while sleeping, AND you're not allowing access to the NAS from outside your LAN; then, the encryption value add is prevention of data access resulting from physical theft of the NAS (assuming the USB stick isn't left plugged in).
Thanks for your very clear videos about Synology :)
I'm glad they're helpful, thank you for watching!
I've already discovered how to encrypt "shared folders" on my NAS. And this can be done by anyone who really wants to explore their Synology NAS to unlock all the capabilities those packages can provide. But what if you only want to encrypt a sub-folder with a shared folder? Can that even be done? And if so how would you do it?
You cannot do that, unfortunately. You can only encrypt a full shared folder and in newer NAS devices, volumes.
@@WunderTechTutorials Thanks I thought that might be the case. My solution was to create a shared folder with the same name as my subfolder, then move all the files to the new share and encrypt it. After I just deleted the old sub-folder once all the files had moved over.
Interesting video - in fact I only see the encryption as a layer , in case the NAS gets stolen. One has to assume in case it gets stolen, the USB drive gets stolen too, means in both cases you are left with the security of the user account?
When you say USB drive, you mean the encryption key? If so, yes, the user account would be the layer of protection in that case.
You can get an encrypted USB drive. I'm not sure how well it will work on something like this. I have a lexor which uses my thumb print to unlock. Some have a pin code. The average thief would probably not connect the dots. They just want to make money off of it.
Is it not possible to have the mounted folder automatically unmounted, for example at a given time of day or after a certain time of inactivity? Not being able to do so feels just like leaving home forgetting to lock the door...
I agree with your analogy about leaving home and forgetting to lock the door. As far as I know, no, there's no way to automatically unmount it through Synology's GUI. However, if you're comfortable in the CLI, it's probably easy to set up a script that does it.
@@WunderTechTutorials Thank you. Unfortunately I do not even know what CLI is, and scripting is even further above my knowledge, so that will be a tough one…
@@Hoggormen Sorry, CLI is command-line interface. Yes, it's probably best to stay out of it (I wouldn't use it for this either). The only other suggestion would be to set up start up/shut down schedules (which will automatically unmount it), but I'm not sure it's worth it.
Thx for the question and thanks the alternative solutions.
can the authentication logs be viewed in event viewer even the folder is shared?
The authentication logs for what exactly?
Very useful thank you
Hi. Great guides, really appriciate them :)
I have a question on backing up encrypted foldes til another synology. If I set up encryption for a number of documents, I wosuld want those same documents to stay encrypted on the backup synology as well right. So how do I do that? Do I just create an encrypted folder on the destination synology, and set up hyperbackup between the two? Or is there something within the hyperback process I need to set up? I hope you can help out on this :)
I will give the disclaimer that I haven't done an encrypted folder to encrypted folder backup from NAS to NAS, but you have to keep in mind that encrypted folders need to be "mounted" and when they're mounted, act like any other shared folder. Therefore, if both folders will stay mounted to ensure they back up, you are essentially using a regular shared folder (unless you intend on unmounting them regularly).
@@WunderTechTutorials Hi, thank you. You'r right, my encrypted documents will be accessible on both NAS as long as they are mounted. I think my thinking is, if someone where to steal my NAS, I want those documents to be inacceaaible. And if so, the documents have to be encrypted on both NAS. If a thief were to steal both my NAS in my house, it would not make much sense to have the documents encrypted on one NAS, but not the other.
But since you are not brining up any other options, like doing the encryption in HyperBackup, I guess it's a matter of creating an encrypted folder on both NAS, and set up backup between them.
Thank you :)
@@SimonSelmer If you asked me how I would do it, I would use Hyper Backup. I just didn't bring it up as I imagined you wanted to use something like Shared Folder Sync or Snapshot Replication :-)
Can shared folders encrypted like this be decrypted on another Synology with the password?
I don't think you'd be able to transfer it to a second NAS encrypted unless you were to move the physical hard drives.
@@WunderTechTutorials I mean if I move them, ofcourse, in case I want to buy another Synology.
But after some tests and looking at the downloaded key file, I don't think the NAS's hardware key is used so I think it's fine to move the HDDs to another Synology NAS.