Way to encrypt a folder (and) prevent it being deleted?

[lyphe416]

Hi all,

I know we can pw protect folders using disk utility, or I've also seen recommendations for using Encrypto. Both are great and protecting folders, but it seems like the files can still be moved to trash and subsequently deleted.

Is there a simple way to protect a folder with a password, and also protect it from being deleted?

Ty in advance!

Phil

 

[barbu]

You can remove modify permissions from the folder if you don’t want to add to it.

 

[lyphe416]

Hmmm ...

I would definitely be adding and removing from it. This would be a folder to hold things like tax docs etc. So I'd want the ability to add/remove.

An outside app is aok too if there is a good one anybody recommends. I like and tried out Encrypto, except that it allows you to delete the folder without asking for a pw :/

 

[barbu]

You could use an encrypted disk image instead. You can make one in disk utility. No need to encrypt your files, just drop them on the disk.
Of course, the image file could still be deleted, same as any file. I recommend implementing a backup strategy.

 

[lyphe416]

You could use an encrypted disk image instead. You can make one in disk utility. No need to encrypt your files, just drop them on the disk.
Of course, the image file could still be deleted, same as any file. I recommend implementing a backup strategy.

Thanks Barbu.

So in essence, there is no simple way to keep a file from being deleted, and my best bet is to ensure I have a back up encrypted copy someplace. I'm new to mac and had been hoping there was something similar to folderguard for pc, which added a pw to files but also required a pw before you could delete it.

All good and ty.

 

[0128672]

You could lock the folder or files in Get Info, which triggers a warning before it goes into the Trash, and prompts to either Stop or Continue, but ultimately can still be deleted if you press Continue. If Stop is selected the file or folder stays in place.

It's file-specific as opposed to all Trash (by setting the Finder Trash preference to warn before emptying the trash). I'd check to make sure the Finder Trash settings (under Advanced) are not set to auto empty after 30 days.

 

[barbu]

Thanks Barbu.

So in essence, there is no simple way to keep a file from being deleted, and my best bet is to ensure I have a back up encrypted copy someplace. I'm new to mac and had been hoping there was something similar to folderguard for pc, which added a pw to files but also required a pw before you could delete it.

All good and ty.

you can create another (non-admin) user and assign ownership of the folders to them. Then any time your normal account accesses or tries to modify it, you will need to elevate with an admin password. Good enough?

 

[NoBoMac]

Did a little digging into Folder Guard and, to me, not a really great/secure product. But can emulate in MacOS.

Get the feeling that Folder Guard is just a database and frontend to basic Window commands. Specifically, the attrib command that changes/sets attributes on objects. The passwords are there to prevent Average Joes from doing anything, but anyone that knows their way around or knows the name of the folder, easy to get to.

attrib

Reference article for the attrib command that displays, sets, or removes attributes assigned to files or directories.

docs.microsoft.com

+s and +h options to hide and block changes.

On Mac, it's chflags.

chflags Man Page - macOS - SS64.com

ss64.com

hidden and uunlnk to hide and prevent deletion.

Great example for the hidden flag is the Library folder in the user account. By default, not visible in Finder, but can get to it no problem by using a Terminal or Goto Folder in Finder and typing in the pathname.

There might be a program in the App Store that works like Folder Guard, worth a search. But a more secure way of going about this, as mentioned, encrypted disk image with a script to mount/open it and another to unmount/close where the scripts handle the chflags specifics.

But all this is a bit overkill imo. If an M processor Mac, all files are encrypted, so protected at rest. If you turn on File Vault, can't boot the Mac or get to files until the user password is entered. Backup your files using an encrypted Time Machine backup, files are backed up and encrypted and recoverable if deleted by mistake on the Mac. Or Carbon Copy Cloner is another option for encrypted backups.

Or an encrypted external that you can plug in/out as need be.

ADD: forgot to mention that Folder Guard does not encrypt anything. Just a front end to access control list, protection groups, etc. Quote:

Folder Guard protects your files without encrypting them.​

There is no risk of losing your documents if you lose your encryption key: with Folder Guard all your files remain intact, without modification of any kind.