Full disk encryption vs home directory encryption dual boot

I think the better solution is to separate your system partitions from your data partition(s). Preferably on different disks if your system can. System on an SSD and data on a different HDD.

Install a smaller fully encrypted system, with swap file and /home in your root partition.

Then create a separate encrypted data partition and open/mount it on boot. If you still want to access this from within your /home directory then just mount it there.

If your system or SSD dies your data is still safe and sound, and accessible from any Linux system.

That is right, my content is not worth to be encrypted, and I like to keep things simple, and also should it get stolen, usually the new owner just formats and reinstalls.

well I know that, just wanted to show you can also keep your electronic life simple, rather than complicated and haven’t red the statement with that ProctorU - Stuff, sorry

i missed the section with the ProctorU -stuff, sorry for that, in that case forget my comments

This laptop only has one SSD and additional drives can’t be added.

Your personal and private data could be stored on encrypted USB external drive(s), then it would be portable between systems.

This would be the most private method, and most resilient to system or hardware failure.

Most privacy advocates suggest that all system data be stored on external encypted drives and only accessed with networking disconnected. Many user will consider this overkill though.

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.