Need to Encrypt a folder [Solved]

[LU344928]

I can also give Vera Crypt a big thumbs up. I used its predecessor, True Crypt, for years and it always delivered the goods.

I don't think it's in the repo yet but you can get it here - https://veracrypt.fr/en/Downloads.html

You'll probably want the gui version.

This tutorial works on MX - https://www.linuxandubuntu.com/home/enc ... -truecrypt

It's the best option whether you want to just encrypt a folder or an entire partition imo. Just keep in mind the encrypted volume will need to be a bit larger than the folder you need to encrypt, i.e. if the folder size is 20mb then create a volume no smaller than 25 or 26mb.

[Stuart_M]

I don't think it's in the repo yet but you can get it here - https://veracrypt.fr/en/Downloads.html

VeraCrypt is available in the Stable Repository. Here is an image of it in the MX-19.4 MXPI. Note that it is at its current version 1.24 (as of this posting).

VeraCrypt_MXPI.png

[figueroa]

What is your use-case. In other words, from what are you protecting these files? The use-case should drive the type of protection you use. The greater the protection needed. How much data needs to be protected (how many files and how many GB)?

[LU344928]

I don't think it's in the repo yet but you can get it here - https://veracrypt.fr/en/Downloads.html

VeraCrypt is available in the Stable Repository. Here is an image of it in the MX-19.4 MXPI. Note that it is at its current version 1.24 (as of this posting).
VeraCrypt_MXPI.png

Good to hear. I did see it in the request thread but that was some time ago. Thanks for that.

[JayM]

Be sure to back up your data prior to encrypting the folder just in case something goes wrong.

[LU344928]

Then the backup would need to be offsite or on cloud storage. No point in encrypting a folder if you have an unencrypted backup on the same computer.

I guess that goes without saying but this could be overlooked by newbies to encryption.

[JayM]

You can always securely delete the backup when you're through. The package secure-delete's in the stable repo. It's just that I think Veracrypt will create a new encrypted volume which could destroy your existing data in the process. Anyway, it's better to be prepared than to accidentally lose your data.

[LU344928]

It's just that I think Veracrypt will create a new encrypted volume which could destroy your existing data in the process.

That would only happen if you're encrypting an existing partition, not a good approach anyway. If you're just working with folders then the original folder remains unaltered. It's just a simple copy/paste to the encrypted container/volume which appears as another drive in the file manager.

[alexjack]

If what you want is to click on a folder (well, device/partition at top left of Thunar) and have a password dialogue pop up, then a LUKS encrypted partition will do that. You don't need to set up LUKS opening during boot. The drive encrypted partition should appear in Thunar, you click on it and a password prompt will pop up, then the system will automount the unlocked partition. You can create a LUKS encrypted partition in gui disk tools in MX.

A Veracrypt container is pretty close to this use scenario but does involve a couple more simple steps in the gui to open the container. Really, just selecting the container before mounting. The Veracrypt approach is simpler overall if you ask me and you can backup or move your container to anywhere you like.

I use both approaches for different things.

[JayM]

I used to use Veracrypt to encrypt my external backup drive and as you say it's pretty simple to decrypt and mount it using the GUI, but now I just use LUKS as I can do the same in Thunar without having to use an additional app.

If the OP decides to use Veracrypt, one tip: at some point when you decrypt the volume it will ask for either your password or root's: enter your own password. Then after the volume's mounted you'll have full read-write-execute permissions on the files already.