Lion Cipher Lab

Turn on full-disk encryption (and save your recovery key)

Why it matters

A laptop or phone left in a taxi, stolen from a bag, or sold without wiping is one of the most common ways personal and company data actually leaks — and without encryption, whoever ends up with the device can read every file on it simply by pulling the drive or booting from a USB stick; your login password protects the account, not the bytes on the disk. Full-disk encryption fixes that: with it on, the entire drive is scrambled and unreadable without your key, so a lost device is a hardware loss, not a data breach. Every major OS ships this for free, and turning it on is one of the…

What you'll learn

Steps in this lab

  1. What full-disk encryption actually protects against
  2. Back up first, then find your platform's built-in tool
  3. Turn it on
  4. Save your recovery key — this is the step people regret skipping
  5. Confirm it's on, and understand the everyday experience
  6. Don't forget the small devices
  7. Why this is the best security-per-minute you can buy

Open the full interactive lab →