I have some financial files (like old tax returns) on my computer that I seldom access and would like to have an extra layer of confidentiality for, so i was looking into how I could easily have an effective separately-encrypted folder for those on my system.

Obviously I could create a separate dm-crypt partition, but since it's probably a small number of files and the total volume I want long term is not very well known (e.g. I might also want to add things like images of important official documents), that doesn't seem like the ideal solution. It seemed like maybe ecryptfs could be the way to go, but I know the use of that for encrypted home directories was deprecated by a while ago and looking at Launchpad it sort of seems abandoned (the last recent revision listed is from 2017). Does anybody know the status or have a better suggestion?

code.launchpad.net/~ecryptfs/e

Follow

A couple of addenda:

1. It does seem like Synology actively uses eCryptFS for encrypted folders, so maybe it is not as abandoned as it looked.
2. I also saw discussion of EncFS, but there also seemed to be indications that that was abandoned.
3. I I'm viewing this as separate from the issue of encrypting the entire partition with all my files, because the point is to have these files encrypted with a separate passphrase. Since they seldom need to be accessed, this will hopefully add a bit more confidentiality. For the same reason, performance isn't much of a concern.
4. I realize that the data may still sometimes be present in swap, but again if the assumption is that access is infrequent this is at least only rarely the case.
5. I know that for specific file types the files or certain applications there may be a mechanism for password protection or similar measures, but I figured it made sense to just have a generic solution for arbitrary files.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.