LUKS (Linux Unified Key Setup) is a full disk encryption specification for Unix systems (originally intended for Linux only). It allows you to easily create an encrypted volume.


On Ubuntu/Debian, run: apt-get install cryptsetup.

Set up

Run the following to create an encrypted volume on /dev/sdb:

$ cryptsetup luksFormat /dev/sdb

Please note that this delete the contents of /dev/sdb.

After that, open the volume and create a file system:

$ cryptsetup open /dev/sdb encrypted
$ mkfs.ext4 /dev/mapper/encrypted

Open and mount

Open the volume and then mount it (in this case to /mnt/data):

$ cryptsetup --type luks open /dev/sdb encrypted
$ mount -t ext4 /dev/mapper/encrypted /mmt/data

Unmount and close

$ umount /mnt/data
$ cryptsetup close encrypted
Edit this page on GitHub