Should You Encrypt Your Linux Install?

Encrypting your Linux install is one thing you can do to secure your device. Should you do it? And how can you do it?

Note: Matt is not a security expert. This is explained mostly from a noob perspective with complete ignorance of any technology behind actual encryption.

Also, remember to put your recovery key in a safe place where it can't be gotten to by others. I don't say this on the video, but it seems like it should be common sense.

===== Thanks to Our Patrons! ====
Devon C. -- Tier 4 Patron
Marcus B. - Tier 3 Patron
Donnie H. - Tier 3 Patron
Maeglin - Tier 3 Patron
Sven C. - Tier 3 Patron.
EastCoastWeb - Tier 3 Patron
Marek M. - Tier 1 Patron
Camp514 - Tier 1 Patron
Mitchel V - Tier 1 Patron

===== Follow us 🐧🐧 ======

#tut #thelinuxcast #encryption

[marhensa]

it's okay for baremetal everyday use. but when renting a Linux VPS. the VPS provider in theory could easily create memory dump of our running operating system, and from memory dump, some program could decrypt our encrypted drive. or worse, they even could create live snapshots of our VPS (which basically a VM) and runs it elsewhere without any problem decrypting in the first place.

[taxaction]

Thanks for the vid. It's always nice to have that extra layer of security 👍.

[lebeinderbadewanne]

We all agree: Linux is amazing :) And you should always encrypt your drives if you store personal or important data on it. Also the backups. There are many reasons for this. My external hard drive has read and write problems, but still works in a way. I could have it replaced under warranty, but I probably won't be able to erase it safely. But because it is encrypted, I can send it back to the manufacturer without worrying.

[MarcGameplays]

I like encryption, but it's a bit annoying to enter a password twice when booting. In Linux Mint, if you encrypt the home folder, you only have to enter a password once when booting,

[delphi]

Good job explaining. I wasn't sure how to do full disk encryption. I saw the installer ask me if I wanted to encrypt the home folder but not disk. I restarted and followed your direction and it worked fine.

[ricardorien]

Thanks for your videos! Greetings from Venezuela.

[estudismo]

I honestly hate and get very irritated when someone does a video talking a lot and takes long to say something, but, I watched your whole video without even care about it. I like how calm you talk, keep up the good work!

[lukevideckis]

4:39 if there was a way to recover the data without password& recovery code, then a hacker could use that same method to retrieve it

[samacumen]

Great video mate! Learnt something new.

[bobpage]

This is probably a stupid question (so I apologise in advance), if you are installing Linux onto a machine that has TPM 2.0 Linux automatically use it for storing your security key for encryption/decrypt operations??

[toddpark]

Thank you. How does encryption affect backups? Is the backup encrypted?

[Breeegz]

A laptop has a set of different security risks.

Was typing that about the same exact moment you mentioned in your video.

[sylwester]

Thank you. I'm an amateur and that video clarifies a lot.

[Rosi]

If I'm going to multiboot, can I encrypt only the selected partitions, where do I install Ubuntu now?

[boringboringboringboring]

Will Tim work if The SSD drive with Ubuntu installed on it is encrypted?

[wisteela]

There's also the issue of if you need to read the drive in another computer.

[Michael-itgb]

The problem ive had in the past with other encryption programs is that they got stuck during some file copy process or connection problems and the next time I tried to enter and get my files everything was corrupted and my files were basically gone. Luckily I had backups. But this is definitely a concern. I will give it a try on my new Linux install.

[snax_]

Thank you for your video. The question is, how can I encrypt a server which is used by many. Yes it is possible, but after every boot it must be decrypted. Have you an answer for that?

[utubepunk]

If you're installing Linux onto an SSD, which file system would you use?

[erbenton]

So, assume you are logged in and using your desktop. If someone (you or another user if you are running multi-user setup) ssh's into your system do they see unencrypted files