It is pretty easy to access your unencrypted data, if someone have physical access to your computer.
\nThat is where ecryptfs encryption comes in. It will make sure your laptop, if lost or otherwise accessed by unauthorised user, is harder to extract data from.
\nWhen encrypted,data cannot be accessed unless user has entered proper login key, or unlocked via ecryptfs-mount command.
\nSome caveats: When user logs in, the encrypted homedir is unlocked, making user homedir accessable for root or wheel users, and will remain so untill reboot\/shutdown.<\/p>\n
Swapspace can also be encrypted,this though, will disable hibernation ability.<\/p>\n
Make sure ecryptfs is\u00a0installed.\u00a0<\/span>Add user to group ecryptfs,\u00a0<\/span>encrypt homedir. <\/span><\/p>\n Log in as root<\/span><\/p>\n <\/p>\n Log out root. \u00a0\u00a0NOT REBOOT<\/span><\/p>\n <\/p>\n Login as user and run:<\/span><\/p>\n When user\/data is checked, and all is present, remember to delete the \/home\/user-?????? folder that was made as backup<\/p>\n Recommended to encrypt swap partition.<\/span><\/p>\n To recover an encrypted homedir, login as root\/wheel user, run ecryptfs-recover-private, enter passphrase, navigate to \/tmp\/ecryptfs.xxxxxxxx<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" It is pretty easy to access your unencrypted data, if someone have physical access to your computer. That is where ecryptfs encryption comes in. It will make sure your laptop, if lost or otherwise accessed by unauthorised user, is harder to extract data from. When encrypted,data cannot be accessed unless user has entered proper login …<\/p>\n\n
\n
\n
\n