Get No-Fuss File-Level Crypto With Fscrypt


Discover How To Harden My Filesystem HOWTOs

Get No-Fuss File-Level Crypto With Fscrypt


Learn how to use fscrypt to create an encrypted filesystem - but be warned: this involves tinkering on the command line and doing a partially or fully manual operating system installation. However, if you are willing to put in the time and effort, you will enjoy a high-performing computing experience with seamless modern encryption protection.


Not long ago, I made the case that for most users file-level encryption is adequately secure and much higher-performing than full-disk encryption. I received a lot less pushback than anticipated for expressing this heterodox view — by which I mean I actually got none. Quite to the contrary, some readers sent messages and comments expressing curiosity and eagerness to try file-level encryption.

This came as a surprise. I wasn’t sure how many people would want to put file-level encryption into practice, and I imagined those who did would take the less arduous route of installing a distribution like Linux Mint that offers this as a checkbox in a menu.

That’s why I left my argument almost entirely in the realm of theory. I was more interested in challenging an accepted model with an underrepresented alternative. A theoretical approach suited this exercise while simultaneously leaving implementation up to those intrepid enough to put theory into practice. After all, Linux is about doing what you want, and I was not about to tell anyone what that might be.

Comments (0)

There are no comments posted here yet

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.