166
Do you encrypt your drives and why or why not? (lemmy.ml)
submitted 2 years ago by to c/linux@lemmy.ml
230 comments fedilink hide all child comments
 

I was recently intrigued to learn that only half of the respondents to a survey said that they used disk encryption. Android, iOS, macOS, and Windows have been increasingly using encryption by default. On the other hand, while most Linux installers I've encountered include the option to encrypt, it is not selected by default.

Whether it's a test bench, beater laptop, NAS, or daily driver, I encrypt for peace of mind. Whatever I end up doing on my machines, I can be pretty confident my data won't end up in the wrong hands if the drive is stolen or lost and can be erased by simply overwriting the LUKS header. Recovering from an unbootable state or copying files out from an encrypted boot drive only takes a couple more commands compared to an unencrypted setup.

But that's just me and I'm curious to hear what other reasons to encrypt or not to encrypt are out there.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago* (5 children)

I would strongly encourage people to encrypt their on site data storage drives even if they never leave the house and theft isn’t a realistic thing that can happen.

The issue is hard drive malfunction. If a drive has sensitive data on it and malfunctions. It becomes very hard to destroy that data.

If that malfunctioning hard drive was encrypted you can simply toss it into an e-waste bin worry free. If that malfunctioning drive was not encrypted you need to break out some heavy tools tool ensure that data is destroyed.

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 10 points 2 years ago (2 children)

    1 torx screwdriver 1 hammer

    not the hardest thing to scratch up the platters and then fold them into abstract art

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 2 years ago

    I don't bother to take out the screws. I just drill handful of holes trough the whole thing. Or if you're really paranoid a MAP torch is enough to melt the whole thing (don't breath the smoke).

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago (1 child)

    If your drive starts malfunctioning, then without encryption you might be able to read some sectors and recover a few things. With encryption you are SOL.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (last edited 2 years ago)

    This is why backups are important. But even if the drive is encrypted recovering data is exactly as easy as recovery from a non encrypted drive.

    1. Do a ddrescue of the drive.
    2. Re apply the luks header.
    3. decrypt all non corrupt sectors
    4. Use appropriate tools to recover files.

    Like you lose the same sectors if those sectors are encrypted or not.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago (1 child)

    Great point.

    I provided reasons why I encrypted my drives but this one is even better.

    (Another one could be if you need to get your computer to a repair shop, and for some reason you can't just remove the drive.)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    If that malfunctioning drive was not encrypted you need to break out some heavy tools tool ensure that data is destroyed.

    If by heavy tools, you mean a screwdriver and an angle grinder, then yeah, but it's not that hard in reality.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I just encrypt devices that leave the house. I do have access to a hard drive crusher if I lose a drive (recently crushed a tablet that wouldn't power on)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •