Top 5 Disk and File Encryption Tools for Linux


Here are the Top 5 best Disk and File Encryption tools that you can use on your Linux based PC

Disk encryption is a technology that protects information by converting it into an unreadable code that cannot be deciphered easily by unauthorized people. Disk encryption uses disk encryption software or hardware to encrypt every bit of data that goes on a disk or disk volume. It is used to prevent unauthorized access to data storage.

Benefits surrounding the usage of full disk encryption are both tangible and intangible. With FDE properly enabled to each system in your fleet, the risk of data compromise is greatly reduced. Further, compliance with regulations results in the prevention of potential fines due to lost or stolen hard drives/systems.

Without any doubt, one of the most critical merits is strengthened data security. Full disk encryption uses strong encryption algorithms to encrypt drives on your PCs, thereby protecting all data stored in the drives. With FDE, even though the drive is removed from the current computer and put into other devices, the drive data is still inaccessible if without a correct key. So let’s take a look at the Top 5 Disk and File Encryption Tools for Linux

Top 5 Disk and File Encryption Tools for Linux

  1. CryFS
  2. Cryptmount
  3. Cryptsetup
  4. eCryptfs
  5. EncFSMP


CryFS is a free and open-source cloud-based tool that lets you encrypt your files and store them anywhere. Setting it up is a breeze and it is compatible with popular cloud services like Dropbox, iCloud, OneDrive, among many others. CryFS works in the background – so you won’t notice it when accessing your files. This tool doesn’t just encrypt your files- it also encrypts your file sizes, metadata, and directory structure.

The base directory contains a configuration file with the information CryFS requires to decrypt it. This configuration file is encrypted twice: once with aes-256-gcm and once with your chosen password. This same password will also be used for integrity checks.


Cryptmount is a user-friendly open-source encryption tool aimed at Linux users running the 2.6 and later kernel series. It lets beginners encrypt a specific filing system without requiring superuser privileges. Cryptmount uses the dev mapper mechanism, which offers many options for creating encrypted filesystems.

This offers several advantages such as letting you access improved functionality in the kernel, transparent support for filesystems stored on either raw disk partitions or loopback files, separate encryption of filesystem access keys which allows access passwords to be changed without re-encrypting the entire filesystem, as well as letting you store multiple encrypted filesystems within a single disk partition, using a designated subset of blocks for each.


Cryptsetup is an open-source utility made to easily allow users to set up disk encryption based on the DMCrypt kernel module. This module includes plain dm-crypt volumes, LUKS volumes, loop-AES, TrueCrypt (including VeraCrypt extension), and BitLocker formats.

It uses the standard LUKS (Linux Unified Key Setup) design to protect against low entropy attacks and provide multiple keys support and effective passphrase revocation. The use of LUKS also allows compatibility among distributions as well as multiple password security. LUKS stores all necessary setup information in the partition header, allowing users to easily transport or migrate data.


eCryptfs is a free, open-source, cryptographic filesystem for Linux. You can think of it as “GnuPG as a filesystem”. The filesystem stores cryptographic metadata in each file’s header, which allows for the copying of encrypted files between hosts. These encrypted files can then be decrypted with the corresponding key in the Linux kernel keyring. This tool has been part of the Linux kernel since version 2.6.19 and is used in Google Chrome, as the basis for Ubuntu’s Encrypted Home Directory and in several network-attached storages (NAS) devices.


EncFSMP is a free and (mostly) open-source tool for mounting EncFS folders on Mac OS X and Windows. This tool lets you create, edit, export, and change your EncFS folder passphrases. EncFSMP is perfectly compatible with EncFS 1.7.4 on Linux. With EncFSMP, you’ll find that configuration is stored in the working directory in the form of a dotfile (.encfs6.xml). Since all other metadata is stored in the configuration file, you conveniently only need to remember your passphrase. EncFSMP is usable for Dropbox and other cloud storage platforms since it encrypts on a per-file basis.

These are the Top 5 best Files and Disk encryption tools that you can use on your Linux based PC/Laptop. For more news on tech and cybersecurity stay tuned on Android Rookies by subscribing to our newsletter from here.


About Author

Be Ready for the challenge

Notify of
Inline Feedbacks
View all comments