Full Disk Encryption (FDE) is the encryption of an entire disk or storage volume so its contents are protected if the device is lost or accessed offline. It matters because a lost laptop should not immediately become a readable pile of sensitive information for whoever picks it up.
What is Full Disk Encryption (FDE)?
FDE protects stored data by requiring the right credentials or platform state before the volume becomes readable. It is a foundational control for laptops, portable workstations, and other endpoints that may leave controlled premises.
What Full Disk Encryption (FDE) Commonly Supports
Common uses include laptop protection, regulated endpoint security, theft resistance, offline access control, and mobile workforce security.
Full Disk Encryption (FDE) vs. Partial File Encryption
FDE protects the broader storage surface. Partial encryption covers only selected files or folders rather than the entire drive.
Frequently Asked Questions
Why is FDE important?
Because device theft or loss is far less damaging when the storage cannot be read offline easily.
Does FDE stop all data misuse?
No. Once a device is unlocked and in active use, other controls still matter.
Related Cybersecurity Terms