Tomb
A minimalist Linux command-line tool that creates and manages encrypted LUKS volumes called tombs.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About Tomb
Tomb is a small command-line program built on Linux dm-crypt and LUKS. It stores encrypted data in a file called a tomb, which is locked with a separate key file. You can keep the key apart from the data, for example on a USB stick.
A few short commands cover the whole process: dig creates the tomb file, forge makes a new key, and further commands lock, open and close it. The project has been developed since 2007 and suits Linux users who want encrypted containers they can script and move around.
Strengths
- Short, memorable commands for creating and opening encrypted volumes
- Keys are kept in separate files that can be stored apart from the data
- Built on standard dm-crypt and LUKS
- Long history, developed since 2007
Limitations
- Linux only
- Command line only, with no graphical interface
Details
- Pricing
- FreeFree and open source.
- License
- GPL-3.0
- Developer
- Dyne.org
- Platforms
- Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Linux users who want scriptable encrypted containers with separate key files
- Categories
- Encryption tools, CLI tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Tomb
Compare allSoftware that can replace Tomb for an important use case, and what changes if you switch.
cryptsetup and LUKS
The standard Linux full-disk encryption layer.
cryptsetup is the underlying Linux LUKS layer that Tomb builds on, offering multiple key slots and full-disk use but longer, less memorable commands.
VeraCrypt
Disk encryption that creates encrypted containers, encrypts whole partitions, and can encrypt the drive Windows boots from.
VeraCrypt creates encrypted containers on Windows, macOS and Linux with a graphical interface and hidden volumes, but mounting needs administrator rights and a driver.
zuluCrypt
A Linux GUI and command-line tool for creating, opening and managing encrypted volumes and files.
zuluCrypt manages LUKS and other volume formats on Linux through both a GUI and command line, but lacks Tomb's separate key file workflow.
Tomb as an alternative
Listings that name Tomb as an alternative.
BestCrypt
Commercial encryption software from Jetico for protecting hard drives, files and folders.
Tomb is free and open source, creating LUKS volumes with separate key files through short commands, but it is Linux only with no graphical interface.
fscrypt
A command-line tool, written in Go, for managing native Linux filesystem encryption on ext4 and F2FS.
Tomb creates LUKS-based encrypted container volumes with separate key files instead of encrypting existing directories, and remains Linux and command line only.
Similar software
Related functionality, not necessarily a direct replacement.
Shufflecake
A Linux tool for creating multiple hidden encrypted volumes that offer plausible deniability.
gocryptfs
An encrypted overlay filesystem for Linux that encrypts each file individually, so cloud sync and backups only move what changed.
