What is the best way to protect files on a USB drive?

Use USB encryption when the main risk is a lost or stolen drive, File Lock Pro when selected files or folders need owner access control, and Copy Protect when recipients should view delivered content without receiving reusable source files.

Does USB encryption stop files from being copied after the drive is unlocked?

No. Drive encryption protects data at rest. After the secure area is unlocked, files behave normally unless they also have file-level or controlled-delivery protection.

Can I prevent recipients from copying files from a USB drive?

GiliSoft Copy Protect can package supported documents and media into GCP or EXE output and restrict common copying, printing, screenshot, clipboard, Save As, and playback paths.

Can I keep public and private files on the same USB drive?

Yes. GiliSoft USB Encryption can create a password-protected private area and a normal public area on the same removable drive.

How to Protect Files on a USB Drive

Fast recommendationUse GiliSoft USB Encryption for a private area on a removable drive. Use File Lock Pro to lock or hide selected USB files and folders. Use GiliSoft Copy Protect when customers, students, partners, or field teams should open delivered content without receiving the ordinary source files.

Choose the right USB file protection

Your main concern	Best fit	What it protects	What happens after access
The USB may be lost or stolen	GiliSoft USB Encryption or BitLocker To Go	The removable drive or its private area while locked	Files behave normally after the drive is unlocked
Only selected files or folders should be private	GiliSoft File Lock Pro	Chosen files, folders, or drive content	The owner enters the master password to unlock or unhide items
Recipients may view files but should not reuse the sources	GiliSoft Copy Protect	Documents, PDFs, presentations, video, audio, images, web pages, and mixed folders	Recipients open a controlled GCP or EXE package
A trusted recipient needs a one-time transfer	AES-encrypted archive	The archive until the password is entered	Extracted files become ordinary files
One Office or PDF file needs a password	Application-level password protection	The individual document	The original file opens after the correct password is supplied

Prevent ordinary source-file copying with GiliSoft Copy Protect

Use Copy Protect when a USB is part of a delivery: client documents, paid course material, product catalogs, presentations, training video, image libraries, audio, offline web pages, or mixed project folders. Instead of placing the ordinary sources on the drive, create a controlled GCP or EXE package.

GCP and EXE outputUse GCP for the standard protected-reader format and larger projects. Use EXE for a self-running Windows package when the complete output is within the 4 GB EXE limit.

Copy and output controlsConfigure common copy, clipboard, print, screenshot, Save As, and virtual-machine playback paths for the protected package.

USB or PC bindingAuthorize the delivery USB or a recipient computer so moving the package and sharing a password are not enough to open it elsewhere.

Watermark, expiry, and viewing limitsIdentify the customer or department receiving a package and set how long or how many times it may be opened.

Keep a clean source archive away from the delivery drive, then remove drafts, hidden attachments, personal metadata, and files the recipient should not receive.
Open Copy Protect and add the final documents, media, web pages, and supporting folders in the order recipients should see them.
Select GCP for a protected-reader package or EXE for a self-running Windows delivery within the 4 GB output limit.
Set client permissions for copying, printing, screenshots, clipboard use, Save As, and virtual-machine playback.
Add a password, visible watermark, expiration date, viewing limit, and USB or PC binding where the delivery requires them.
Build the package, place it on a test USB drive, and verify opening, navigation, permissions, binding, expiry, and relaunch behavior on another Windows PC.

Add documents media and folders to GiliSoft Copy Protect — Add the final source files or a complete delivery folder, then organize what the recipient will see.

Set copy print screenshot clipboard and Save As restrictions — Choose the client permissions required for the delivery instead of applying every restriction by default.

Bind protected files to a USB drive or approved Windows computer — Bind the protected package to approved removable media or a recipient computer when password-only access is insufficient.

Deliver controlled files instead of ordinary sources

Create one offline package for documents and media, then define what recipients may open, copy, print, capture, or move. The source files remain in your internal archive.

Download Trial Read User Guide

Encrypt the USB when a lost drive is the main risk

GiliSoft USB Encryption creates a password-protected private area and a normal public area on the same removable drive. Put confidential files in the private area and ordinary handouts, instructions, or public installers in the public area.

Connect the intended USB drive, confirm its drive letter, and keep a verified backup of all important files.
Open GiliSoft USB Encryption, choose the drive, and set the size of the private secure area while leaving enough public space for normal sharing.
Install the secure area, set a strong password, and copy confidential files into the mounted virtual drive.
Close the secure area, reconnect the USB, and verify that private files require the password while public files remain available.

Create a private encrypted area and public area on a USB drive — Choose how much of the removable drive should become a private encrypted area.

Open the encrypted USB private area with a password — Enter the password to mount the secure area as a virtual drive.

Encryption and copy control solve different problems. Encryption protects the files while the drive is locked. After the secure area is opened, the files can be used normally. Add file-level passwords or Copy Protect when restrictions must remain after access is granted.

Lock or hide selected USB files with File Lock Pro

Use File Lock Pro when you own and manage the removable drive and need password-based access to selected files or folders. It can lock items so they remain visible but inaccessible, or hide them from ordinary Windows browsing.

Open File Lock Pro and enter the master password.
Choose External Disk > Locking File when the item should remain visible, or External Disk > Hiding File when it should disappear from normal browsing.
Select Lock Files/Folders or Hide Files/Folders, add the target items, and apply the action.
Eject and reconnect the USB drive, then verify the protected and public content separately.

Lock selected files and folders on an external USB drive with File Lock Pro — Control selected files and folders on removable storage without encrypting every public item on the drive.

Use an encrypted archive for one-time transfer

An AES-encrypted archive is appropriate when several files must travel together to a trusted recipient who is expected to extract and keep them. Use a strong, unique password, test extraction, and send the password through a separate channel.

Archive encryption ends at extraction. The recipient receives ordinary files afterward, so this is not the right method when reuse, printing, screenshots, or forwarding must remain controlled.

Use BitLocker To Go on supported Windows editions

Microsoft identifies BitLocker To Go as BitLocker Drive Encryption for removable data drives, including USB flash drives, SD cards, and external drives. In Windows Control Panel, removable devices appear under Removable data drives - BitLocker To Go.

BitLocker management is available in Windows Pro, Enterprise, and Education rather than Windows Home. Back up the recovery key before relying on the encrypted drive; Microsoft states that it cannot retrieve, provide, or recreate a lost BitLocker recovery key.

Understand what each protection stops

Encryption protects data at restIt protects files before the drive is unlocked. It does not automatically stop copying or forwarding after the authorized user opens the drive.

A shared password is not identityAnyone who receives the password may be able to open the same archive, drive, or document. Use device binding and recipient-specific packages when access must stay with one delivery.

Visible content can be photographedNo desktop software can stop a separate phone or camera from photographing a screen. Visible watermarks provide attribution and deterrence.

Protection does not replace backupKeep clean source copies separately. Test unlock, recovery, extraction, and rebuilding before deploying protection to the only copy of important data.

Recommended setups for common USB use

Personal backup or travel driveCreate an encrypted private area for tax files, contracts, identity documents, and private photos. Keep ordinary handoff files in the public area.

Client or customer deliveryUse Copy Protect when documents and media must remain in a controlled package. Add customer identification, access limits, and USB or PC binding where appropriate.

Employee removable storageEncrypt confidential content and maintain a documented recovery process. For company-wide device policy and approved-device whitelisting, use GiliSoft USB Lock.

Owner-managed project driveUse File Lock Pro to lock or hide selected folders while leaving the rest of the removable drive available for normal work.

USB protection checklist

Verify the drive letter and keep a separate backup before encryption, formatting, repartitioning, or protected-package creation.
Remove drafts, personal metadata, hidden files, obsolete versions, and material the recipient does not need.
Choose one primary goal: lost-drive confidentiality, selected-item privacy, recipient-use control, or company device policy.
Use a unique password and store recovery material away from the USB drive.
Test the finished USB on another supported computer using a non-administrator recipient account where relevant.
Verify public files, private files, passwords, recovery, copy and print rules, device binding, expiry, and relaunch behavior.
Label the USB, record the assigned recipient or department, and retain the source project or configuration needed to rebuild it.

PDF documentsProtect PDF files on a USB drive

Training PDFsProtect training PDF files on USB

PowerPoint presentationsProtect PowerPoint files on a USB drive

Client filesProtect client deliverables on USB

Video deliveryProtect video files for USB sharing

Course materialsProtect mixed course materials on USB

USB file protection FAQ

What is the best way to protect all files on a USB drive?

Use USB encryption when every confidential file should remain unreadable before the drive is unlocked. GiliSoft USB Encryption supports a private secure area plus a normal public area on the same drive.

Can USB encryption stop an authorized recipient from copying files?

No. Encryption protects data at rest. Once the authorized user opens the drive, its files behave normally. Use Copy Protect when delivered content must remain inside a controlled viewing package.

Can I protect only one folder on the USB?

Yes. File Lock Pro can lock or hide selected files and folders on external storage. An encrypted archive is another option when a trusted recipient should extract and keep the files.

Can a USB contain both public and private files?

Yes. Create a password-protected private area for confidential material and leave a public area for instructions, brochures, installers, or files intended for ordinary sharing.

Should I choose GCP or EXE for protected delivery?

Choose GCP for the standard protected-reader format and larger projects. Choose EXE for a self-running Windows package when the complete output is within the 4 GB EXE limit.

Official references

Protect the files according to how the USB will be used

Choose encrypted storage for loss protection, file locking for owner privacy, or a controlled Copy Protect package for customer and partner delivery.

View GiliSoft Copy Protect