FileWard - 1.1.2

Version 1.0 used to be called LockDown, new name is FileWard. I bought it in a bundle with Leopard Cache Cleaner from the same developer. This excellent and inexpensive deal is still on their website as of the time of this writing.

FileWard is a very simple application for encrypting and verifying files, folders and data. For Mac OS X Tiger users it is an easy way to gain the ability to do AES 256 encyrption, which theoretically takes the time of the length of the universe to crack. Mac OS X Leopard users will find this encryption ability is now built into Disk Utility.

As with any encryption, or indeed any security system, the weak point is your password. If you use a common name or a word that can be found in a dictionary, you are literally done for. Successful 'Dictionary Attacks', as they are called, can be performed within less than a minute. Thankfully FileWard includes access to Mac OS X Tiger & Leopard's Password Assistant. Personally I would stick with using the "Letters and Numbers" password. It uses only number, small letter and capital letter characters. You could use 'Memorable' if you like, but it also adds in other ASCII characters including punctuation, which can be confusing and deter you from remembering the password. There is an option called 'FIPS-181 Compliant' that I consider moronic. It only uses small letter characters. And surprise, it is a US government standard. You can laugh about it over at:

http://www.itl.nist.gov/fipspubs/fip181.htm

The other weak aspect of passwords with encryption is that if you lose the password, you are totally hosed. Just wave goodbye to your encrypted files. Seriously. IMHO I'd expect to forget your password. So toss it somewhere you will always know about but no one else will. Personally I like the Keychain approach where all such passwords are encrypted behind a single main password I use every day. I do this using either Apple's provided Keychain Access program, found in the Mac OS X Utilities folder, or I use the much superior shareware program 1Password. Another alternative is to create an encrypted disk image in Disk Utility and save your passwords on the image in a text file. The resulting encrypted password collection created via any of these options can be copied and used over on another Mac if need be.

The encryption methods available in FileWard are Blowfish, CAST5, Triple DES, DES-X, AES 128 and AES 256. FileWard provides a handy menu link to Wikipedia's pages on cryptography to help you learn about each method. It also provides a couple menu options for learning about OpenSSL.

Keep in mind that there is no such thing as a truly 'random' computer generated password. (Look it up, don't argue with me). But a cracker would have to know a bunch of variables about your computer at the moment you created the password to have a clue how to crack it.

So how does FileWard work? Perfectly! I can verify that a coherent document it turned into utter useless gibberish. Happily, anyone with a Mac can download FileWard, not have to pay for it, and can open your encrypted file as long as they have the required password. In a sense this is how StuffIt Expander worked, back when there was a reason to use it. Theoretically, anyone with the same encryption method as you used for encrypting your file can open it as well. Basically, anyone with OpenSSL installed is ready to go. But I'd do some testing at both ends before using it.

The next service FileWard provides is the creation of file SHA1 checksums and the use of checksums to verify files. This ability is actually built into any version of Mac OS X, if you are willing to use the CLI via the Terminal. But if you prefer a GUI, FileWard is simple.

The final service in FileWard is secure file deletion. However, this service has been part of the Mac OS X Finder since 10.3 Panther. So yawn.

The application provides a manual. Bravo! I am so sick of apps that don't. The manual is easy to read and comprehend by beginners. As a geek I wish it went into depth about encryption and check sums. Nonetheless, encryption technology is often changing and FileWard wisely advises that you do your own research to determine what encryption method is best for your purposes.

I give FileWard 4 out of 5 stars. I left a star out only because I found a way to crash the program: Open up Password Assistant from within FileWard then change to another application. Your system will beep at you to tell you this is naughty. Then go back to Password Assistant and try to use it. You'll get a Cocoa 'NSInvalidArgumentException' error and a warning that the application will now quit. Bleh.

So why is encryption necessary and wonderful? Despite lots of hype, good intentions and promises, the Internet is an extremely insecure place. Everyone uses email, and yet it is an antiquated, wide open, "in the clear", technology that can be intercepted and read by adept hackers. The solution to this problem is both encryption and digital signing of your email. You could go whole hog and crawl up the learning curves of PGP or GPG (the free and compatible equivalent of PGP), which work in most email clients. But the person at the other end has to have it installed and working as well. The quickie easy alternative is simply to send encrypted files to your destination. Just be sure you send the password to the file in some OTHER email. Also, never ever send a password of any kind over an open, non-encrypted WiFi connection. They are dirt easy to intercept and exploit by even beginner hackers.