My laptop isn’t under my supervision most of the time. And I’d hate it if someone were to steal my SSD, or whole laptop even, when I’m not around. Is there a way to encrypt everything, but still keep the device in sleep, and unclock it without much delay. It’s a very slow laptop. So decryption on login isn’t viable, takes too long. While booting up also takes forever, so it needs to be in a “safe” state when simply logged out. Maybe a way that’s decrypt-on-demand?

I’m on Arch with KDE.

  • Leaflet@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 months ago

    There is a way for just your home folder to be encrypted, Linux Mint has it as an option.

    • sudo@programming.dev
      link
      fedilink
      arrow-up
      6
      arrow-down
      3
      ·
      4 months ago

      Looks like they use eCryptFS. Never heard of it before so thats neat. I can see using it on systems where you can’t reinstall the system with Dm-crypt but it most cases I suspect Dm-crypt is a better alternative.

      Idk if its faster or slower than Dm-crypt.