work
Create An Encrypted Private Directory In Ubuntu
Posted by Kevin Purdy at 10:30 PM on September 24, 2008
Ubuntu 8.10, the release of the popular Linux distribution due out Oct. 30 (and code-named Intrepid Ibex), will give every user an encrypted private directory by default, one that mounts with you at login and protects your data from any command prompt trickery. In the meantime, the Tombuntu blog explains how to set up an encrypted folder in current versions of Ubuntu, using the same eCryptfs tools as 8.10. The tutorial requires a bit of terminal work, but nothing too complicated, and by the end you'll have simple shortcuts for mounting and unmounting your private drive (with a password, of course). Got a better or easier solution for simple, single-folder encryption in Linux? Tell us in the comments.

Comments (AU Comments · US Comments)
There are currently no AU comments for this post.
windsurfer619
Posted 11:38 PM 24/9/08
I have to say I really love these Ubuntu tips. I would certainly try this had I not already encrypted my entire disk using the alternate install CD, as was previously detailed here on Lifehacker :)
windsurfer619
Jai
Posted 12:52 AM 25/9/08
I may give this a try when I get home tonight although, as Intrepid Ibex is around a month away from release, it seems as though I might as well wait.
I do worry a little about encrypting data in that should I somehow lose access to my machine all of my data is lost.
Jai
sunken
Posted 1:44 AM 25/9/08
If that's true, then I won't be able to access my linux home dir from Windows? I'm not sure I enjoy such forced features.
sunken
tdcrenshaw
Posted 2:23 AM 25/9/08
this will only encrypt the private the directory in your home folder, not the whole home folder as i understand it. if you don't want to use it, don't put any files into it
tdcrenshaw
CyberCowboy
Posted 2:07 AM 25/9/08
@jblackhall: You are correct as long as you log in using your own UID and PW you would have access.
CyberCowboy
CyberCowboy
Posted 2:07 AM 25/9/08
@sunken: If you log in to your Ubuntu box (or use SAMBA) the drive should appear s normal in Windows due to the decrypting happening on the Ubuntu box. I've been doing this for a while with TruCrypt
CyberCowboy
jblackhall
Posted 2:05 AM 25/9/08
@sunken: I'm not 100% sure, but I thought that any time that you're logged in under you own username and password (via ssh or remote desktop) you'll have access to the directory. I could be wrong though.
jblackhall
sunken
Posted 3:23 AM 25/9/08
@tdcrenshaw: I believe you are right. I misinterpreted what the post meant.
sunken
sunken
Posted 3:16 AM 25/9/08
@sunken: That would work for ssh. I was referring to dual-booting into Windows and accessing the ext3 partition directly using IFS Drive.
sunken
RobDLG
Posted 7:19 AM 25/9/08
I'm somewhat surprised by this, since my impression is that eCryptfs is not yet stable. It was touted as a major feature of Fedora 8, but currently appears to be broken in that distro (it seems to work when I build 'ecryptfs-utils' from the latest source, but fails when I use the F8 package). The eCryptfs FAQ states outright that it's still in development, and that file migration may be required after future updates:
eCryptfs is still in a developmental stage. When you upgrade the eCryptfs kernel module, it is possible that the eCryptfs file format has been updated. For this reason you should copy your files to an unencrypted location and then copy the files back into the new eCryptfs mount point to migrate the files.... [ecryptfs.sourceforge.net]
RobDLG
yurivr
Posted 4:21 AM 25/9/08
sudo apt-get install cryptkeeper
uses encFS to make folders. It does not mount at startup but keeps an icon in the taskbar that lets you mount different encrypted folders that you have created. Easiest system I have ever used. Also, it deals with importing/exporting encrypted directories easily.
yurivr
YakiraHapjo
Posted 3:35 AM 25/9/08
Don't try to encrypt your directory full of porn videos, it takes too long.
YakiraHapjo
Telic
Posted 3:02 AM 25/9/08
TrueCrypt can encrypt volumes, and hide their presence. It's available for both Ubuntu and Windows...
[www.truecrypt.org]
:)
Telic
nighttimestereo
Posted 4:56 PM 25/9/08
DON'T FOLLOW THIS ADVICE! You **will** experience data loss!
[bugs.launchpad.net]
This article needs to be taken down along with the lifehacker article referencing it.
nighttimestereo
ZivenElephonkey
Posted 1:31 AM 25/9/08
Here's how to encrypt external drives: http://www.emcken.dk/weblog/archives/164-Encrypted-USB-drive-in-Ubuntu.html They're really easy to mount, too, so I can access those mov......uh.....backups, yeah, that's the ticket.
ZivenElephonkey
TobyM
Posted 1:02 PM 25/9/08
@Telic I second that...TrueCrypt is an option that is stable and simple to use. I love the ability to use keyfiles in addition to the password.
TobyM