I use full-disk encryption via LVM on LUKS [0]. I rarely bother with per-user encrypted home directories since I'm the only user of the device and I don't leave

I use full-disk encryption via LVM on LUKS [0]. I rarely bother with per-user encrypted home directories since I'm the only user of the device and I don't leave it on while traveling or unattended. For external drives and cloud storage I use EncFS via Gnome EncFS Manager [1], which makes it easy to keep track of and mount "stashes". [0]: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#LVM_on_LUKS https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_... [1]: http://www.libertyzero.com/GEncfsM http://www.libertyzero.com/GEncfsM