Ask HN: How do you encrypt your personal files / documents?

7 points by zabana ↗ HN
I keep a personal journal which I store in a hidden folder to keep it private (ie away from non-advanced linux users) but I would like to be able to actually encrypt them so I'm the only one to have access to them in future.

What do you usually use for such purpose ? As I mentioned in the paragraph above, I'm on Linux.

Thanks in advance !

10 comments

[ 3.3 ms ] story [ 34.2 ms ] thread
I personally use DiskCryptor, but I am not super up-to-date on the best programs for encryption/decryption.

DiskCryptor does the job for me. Easy to use, open source.

I am not sure you actually read what the OP asked for.He/She talked about Linux.

DiskCryptor is only available for Windows(0)

To OP,you may check out LUKS(Linux Unified Key Setup)(1).

(0)https://diskcryptor.net/wiki/FAQ

(1) https://gitlab.com/cryptsetup/cryptsetup

Thanks a lot for these recommendations, I will look into both of them !
Or I read the question, and mistakenly assumed DiskCryptor worked with Linux without confirming.

Oops.

I encrypt lots of things. I use the following: To encrypt directories cryptsetup and encfs on linux, dmg on mac, geli on freebsd and git-crypt with private bitbucket repos for docs that I'd like to have a history log (commits).

I think that in your case, you could take a look at git-crypt, but make sure you understand what is encrypted and what is not. Also make sure you don't push before git-crypt lock. A bash prompt changing colours might be handy.

On Linux, you can encrypt your drives using LUKS and cryptsetup. If you want to encrypt single files, you can use gpg2 (with a password, or with a keyfile)
With GPG's symmetric encryption ($ gpg -c <filename>) you just need a passphrase (no keys involved)
(comment deleted)
I use Cryptomator. https://cryptomator.org

I'm not sure of the program's technical specs, but it is multi-platform, available on mobile, and is easy to use. I am able to have a shared set of secured documents with various non-technical family members. I'm not overly worried about the Goverment having my files and I feel it is good enough to keep Dropbox and other hypothetical 3rd parties from my most sensitive documents.