fscrypt
A command-line tool, written in Go, for managing native Linux filesystem encryption on ext4 and F2FS.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About fscrypt
fscrypt manages the encryption support built into the Linux kernel for filesystems such as ext4 and F2FS. Instead of encrypting a whole disk, you encrypt individual directories on an existing filesystem and then unlock them.
The tool takes care of setting up the filesystem, creating protectors and applying encryption policies to directories. It suits Linux users and administrators who want per-directory encryption, for example for home directories, without creating a separate encrypted volume.
Strengths
- Uses encryption built into the Linux kernel
- Encrypts individual directories rather than whole disks
- Works on existing ext4 and F2FS filesystems
Limitations
- Linux only and limited to filesystems with native encryption support
- Command line only
Details
- Pricing
- FreeFree and open source.
- License
- Apache-2.0
- Developer
- Platforms
- Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Per-directory encryption on Linux ext4 or F2FS systems
- Categories
- Encryption tools, CLI tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to fscrypt
Compare allSoftware that can replace fscrypt for an important use case, and what changes if you switch.
gocryptfs
An encrypted overlay filesystem for Linux that encrypts each file individually, so cloud sync and backups only move what changed.
gocryptfs encrypts a folder through a FUSE overlay on any filesystem rather than native ext4 or F2FS encryption, and also runs on macOS in beta.
cryptsetup and LUKS
The standard Linux full-disk encryption layer.
cryptsetup and LUKS encrypt whole disks or volumes rather than individual directories, and are the standard full-disk encryption layer across Linux distributions.
CryFS
An encrypted filesystem that protects files stored in cloud storage, including their metadata and folder structure.
CryFS encrypts a folder through its own filesystem and hides metadata and folder structure, working on macOS and Linux and suited to cloud sync folders.
securefs
Mounts an encrypted directory as a normal filesystem.
securefs mounts an encrypted directory on Linux, macOS or Windows without needing native filesystem encryption, but it requires FUSE or WinFsp.
Tomb
A minimalist Linux command-line tool that creates and manages encrypted LUKS volumes called tombs.
Tomb creates LUKS-based encrypted container volumes with separate key files instead of encrypting existing directories, and remains Linux and command line only.
Similar software
Related functionality, not necessarily a direct replacement.
SiriKali
Graphical manager for encrypted folders created by gocryptfs, securefs and similar tools.
zuluCrypt
A Linux GUI and command-line tool for creating, opening and managing encrypted volumes and files.
VeraCrypt
Disk encryption that creates encrypted containers, encrypts whole partitions, and can encrypt the drive Windows boots from.
