I was recently intrigued to learn that only half of the respondents to a survey said that they used disk encryption. Android, iOS, macOS, and Windows have been increasingly using encryption by default. On the other hand, while most Linux installers I’ve encountered include the option to encrypt, it is not selected by default.

Whether it’s a test bench, beater laptop, NAS, or daily driver, I encrypt for peace of mind. Whatever I end up doing on my machines, I can be pretty confident my data won’t end up in the wrong hands if the drive is stolen or lost and can be erased by simply overwriting the LUKS header. Recovering from an unbootable state or copying files out from an encrypted boot drive only takes a couple more commands compared to an unencrypted setup.

But that’s just me and I’m curious to hear what other reasons to encrypt or not to encrypt are out there.

  • InFerNo@lemmy.ml
    link
    fedilink
    arrow-up
    2
    ·
    12 hours ago

    If your drive starts malfunctioning, then without encryption you might be able to read some sectors and recover a few things. With encryption you are SOL.

    • mholiv@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      11 hours ago

      This is why backups are important. But even if the drive is encrypted recovering data is exactly as easy as recovery from a non encrypted drive.

      1. Do a ddrescue of the drive.
      2. Re apply the luks header.
      3. decrypt all non corrupt sectors
      4. Use appropriate tools to recover files.

      Like you lose the same sectors if those sectors are encrypted or not.