/home folder encryption: post install

New to Debian (Or Linux in general)? Ask your questions here!

/home folder encryption: post install

Postby user2635 » 2017-08-28 22:49

Hi all, some of you may be familiar with Ubuntu's install process.

As part of the setup, you can select to encrypt your home folder seamlessly using the pwd you picked for you user account.

Is there a way I can do this similarly on Debian? If there isn't, I will be happy with just general direction to encrypt home folder.
phil the linux newbie
debian 9 stable since aug 2017
please teach me linux :)
User avatar
user2635
 
Posts: 66
Joined: 2017-08-05 15:42
Location: Skag Gully, Borderlands

Re: /home folder encryption: post install

Postby Doggybag » 2017-08-29 08:21

The short answer is yes, there is. Here's a guide:

https://xo.tc/setting-up-full-disk-encr ... retch.html

That's for wiping the whole disk and installing debian as the only os, but the procedure is similar for a multi-os system.

EDIT: Could you clarify whether you want to encrypt at install time (with the installer), or post install? That guide is for at install time.
Doggybag
 
Posts: 15
Joined: 2017-08-15 08:14

Re: /home folder encryption: post install

Postby kedaha » 2017-08-29 09:13

I don't bother to encrypt my home partition because there's nothing worth encrypting. But I do use KeePass2 to store all my passwords.
It isn't necessary to reinstall to encrypt the home partition.
I think it'd be enough, if necessary, just to encrypt certain directories, which can be done with ecryptfs-utils; for example, see this old link: encrypt-directory-in-linux.
Mate DE & OSSv4.
LaMp, WordPress; ispmail
Debian Stable & Software

Words, as is well known, are the great foes of reality. Joseph Conrad.
User avatar
kedaha
 
Posts: 2789
Joined: 2008-05-24 12:26

Re: /home folder encryption: post install

Postby user2635 » 2017-08-29 20:06

Doggybag wrote:The short answer is yes, there is. Here's a guide:

https://xo.tc/setting-up-full-disk-encr ... retch.html

That's for wiping the whole disk and installing debian as the only os, but the procedure is similar for a multi-os system.

EDIT: Could you clarify whether you want to encrypt at install time (with the installer), or post install? That guide is for at install time.


Hi doggybag, I put in the subject but probably isn't clear enough. I need instructions to do it post install, thanks!
phil the linux newbie
debian 9 stable since aug 2017
please teach me linux :)
User avatar
user2635
 
Posts: 66
Joined: 2017-08-05 15:42
Location: Skag Gully, Borderlands

Re: /home folder encryption: post install

Postby user2635 » 2017-08-29 20:09

kedaha wrote:I don't bother to encrypt my home partition because there's nothing worth encrypting. But I do use KeePass2 to store all my passwords.
It isn't necessary to reinstall to encrypt the home partition.
I think it'd be enough, if necessary, just to encrypt certain directories, which can be done with ecryptfs-utils; for example, see this old link: encrypt-directory-in-linux.


Thanks for the find, I will read it later on today!
phil the linux newbie
debian 9 stable since aug 2017
please teach me linux :)
User avatar
user2635
 
Posts: 66
Joined: 2017-08-05 15:42
Location: Skag Gully, Borderlands

Re: /home folder encryption: post install

Postby Doggybag » 2017-08-30 06:46

Ecryptfs is probably the best way to go in that case (though there are others). This tutorial is basically the same but slightly cleaner and also includes instructions for putting the keyfile on a usb stick, if you want that extra step:
https://www.howtoforge.com/tutorial/how ... on-debian/
Doggybag
 
Posts: 15
Joined: 2017-08-15 08:14


Return to Beginners Questions

Who is online

Users browsing this forum: No registered users and 6 guests

fashionable