- have to do full disk encryption - must have a great passphrase (according to NIST avg 8 char password has 2^18 bits of entropy, which compared to the keyspace

- have to do full disk encryption - must have a great passphrase (according to NIST avg 8 char password has 2^18 bits of entropy, which compared to the keyspace of a 256 bit AES key is so very small...) the strength of the encryption is really based on the strength of the password - must also encrypt backups - what if you forget your password? (say at the border when they order you to decrypt it) - what if the license runs out? - if it's for work there needs to be another key to unlock it. - 2 factor auth would be great.