this post was submitted on 16 Jan 2025
165 points (98.8% liked)

Linux

49051 readers
440 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I was recently intrigued to learn that only half of the respondents to a survey said that they used disk encryption. Android, iOS, macOS, and Windows have been increasingly using encryption by default. On the other hand, while most Linux installers I've encountered include the option to encrypt, it is not selected by default.

Whether it's a test bench, beater laptop, NAS, or daily driver, I encrypt for peace of mind. Whatever I end up doing on my machines, I can be pretty confident my data won't end up in the wrong hands if the drive is stolen or lost and can be erased by simply overwriting the LUKS header. Recovering from an unbootable state or copying files out from an encrypted boot drive only takes a couple more commands compared to an unencrypted setup.

But that's just me and I'm curious to hear what other reasons to encrypt or not to encrypt are out there.

you are viewing a single comment's thread
view the rest of the comments
[–] JubilantJaguar@lemmy.world 4 points 1 day ago (3 children)

Why is this a problem for us and not for ordinary dummies on Android? It's been the default there for years already.

[–] that_leaflet@lemmy.world 5 points 1 day ago (1 children)

Phones make the encryption invisible to the user.

That’s not the case on Linux unless you’re willing to put in a bit of work to set up TPM unlocking yourself or use one of the few distros that use TPM by default, like Aeon.

And even then Aeon’s not perfect. Sooner or later the TPM will fail and you’ll have to enter your long backup password and reenroll the TPM.

[–] JubilantJaguar@lemmy.world 1 points 1 day ago

Yep. But typing in a password at boot is no big deal and you do then get some of the benefits of encryption. The problem, as you seem to be hinting, is the lockscreen issue. A screenlocked OS without the hardware encryption module is not actually locked down whereas Android, for instance, is. Is that right? I've wanted to ask how Android does this - basically, it loses the key and then regenerates it based on biometrics or whatever, each time you unlock, is that it?

[–] savvywolf@pawb.social 2 points 1 day ago

Android backs up data to the cloud. If the phone breaks or gets stolen, you don't need to recover data from it - you can just pull it from Google's servers.

In addition, people tend to not treat their phones as "permanent storage". The concept of losing or breaking their phone is probably more clear, so they make sure to back it up in some way to the cloud or their desktop.

Also, it's much more likely for a phone to be stolen than a laptop or desktop.

[–] john89@lemmy.ca 1 points 1 day ago (1 children)

Android has storage encryption by default?

Why do I only need to enter 1 password?

[–] JubilantJaguar@lemmy.world 2 points 1 day ago (1 children)

Why would you need to enter 2?

[–] john89@lemmy.ca 1 points 1 day ago (1 children)

Well, usually you don't need to enter any password.

I'm referring to a password to unlock the screen.

[–] JubilantJaguar@lemmy.world 1 points 1 day ago (1 children)

That's because you're probably using biometrics instead.

[–] john89@lemmy.ca 1 points 1 day ago (1 children)

How would I know? I don't have to use biometrics when I restart the phone.

[–] JubilantJaguar@lemmy.world 2 points 1 day ago

Then your password or more likely PIN is what is being used to generate the encryption key. Not very strong encryption but better than nothing.