4 ms·
I am scared to use full disk encryption or $HOME encryption because of potential loss of speed, hardware failures because of fragmenting or SSD grinding, the in
by johnchristopher 7y ago
I am scared to use full disk encryption or $HOME encryption because of potential loss of speed, hardware failures because of fragmenting or SSD grinding, the inability to use file recovering tools and being locked out if anything goes wrong. I just read changing the password might lock me out if the key is encrypted (or something).
Any tips?
- organsnyder 7y agoSpeed loss is unnoticeable with any recent hardware (less than a decade old) and typical workloads (even for developers). If concerns about losing data are a roadblock, then you need a good backup strategy. You're already rolling the dice that you'll never have a hardware failure, human error, natural disaster, theft... I can't speak to your SSD wear concern or potential issues during password changes.
- yrro 7y agoRun 'cryptsetup luksHeaderBackup' and store it in a safe place. If you manage to corrupt your LUKS header, you can restore it from the backup. The master encryption key in the LUKS header is still encrypted by your passphrase, so don't use this as an alternative to remembering your passphrase!
- boring_twenties 7y agoThere is no loss of speed on any CPU that supports AES instructions, which is pretty much any CPU released after 2010.