You really have to keep your primary machine clean. Even if you encrypt the drive, if at any point, you have the drive mounted by your computer and your computer has access to the contents, it could be infected.
Don't plug into other machines, don't put on your friends networks, etc. Keep your host machine clean and only keep your external drive attached when you really need it. And also keep a backup of the drive on another drive if the data is valuable.