Difference between revisions of "Encfs"

Marked this version for translation
m (added languages and translate tags)
(Marked this version for translation)
Line 2: Line 2:
__TOC__
__TOC__
<translate>
<translate>
==Introduction==
==Introduction== <!--T:1-->


<!--T:2-->
Encfs is an encryption program that is suitable for encrypting content on an already installed system. It can be used for encrypting your /home or you can make smaller private directories that can hold your encrypted data.
Encfs is an encryption program that is suitable for encrypting content on an already installed system. It can be used for encrypting your /home or you can make smaller private directories that can hold your encrypted data.
You can encrypt Dropbox with it and that has the advantage over Truecrypt that it does not require reserved valuable space that Truecrypt does (as of 05 2014 [http://truecrypt.sourceforge.net/index.html| Truecrypt is considered unsafe]).
You can encrypt Dropbox with it and that has the advantage over Truecrypt that it does not require reserved valuable space that Truecrypt does (as of 05 2014 [http://truecrypt.sourceforge.net/index.html| Truecrypt is considered unsafe]).


<!--T:3-->
Encfs does not reserve a space on your HD and simply grows and shrinks with the files you put in there.
Encfs does not reserve a space on your HD and simply grows and shrinks with the files you put in there.


<!--T:4-->
The one thing that can seem a bit confusing about it is that you need to make two directories (folders) to make it work: one encrypted and one un-encrypted.
The one thing that can seem a bit confusing about it is that you need to make two directories (folders) to make it work: one encrypted and one un-encrypted.


<!--T:5-->
''Why would we need an un-encrypted folder that contains the data we want to encrypt; is that not the mother of all security flaws?''  
''Why would we need an un-encrypted folder that contains the data we want to encrypt; is that not the mother of all security flaws?''  


<!--T:6-->
''The entire point with encryption is that the encrypted data should not be accessible in an un-encrypted form; right?''
''The entire point with encryption is that the encrypted data should not be accessible in an un-encrypted form; right?''


<!--T:7-->
The way Encfs works is that the un-encrypted directory is the mount point for the encrypted content.
The way Encfs works is that the un-encrypted directory is the mount point for the encrypted content.


<!--T:8-->
If you do not mount it ''nothing'' will be visible. And to mount it; you need to enter a given password.
If you do not mount it ''nothing'' will be visible. And to mount it; you need to enter a given password.




==Installing==
==Installing== <!--T:9-->
Encfs is in the community repo so you can simply install it with your favorite package manager or by using:
Encfs is in the community repo so you can simply install it with your favorite package manager or by using:
  pamac install encfs  
  pamac install encfs  




==Using it - encrypting==  
==Using it - encrypting== <!--T:10-->


<!--T:11-->
We want to make a directory that we would call  
We want to make a directory that we would call  
  .secret
  .secret
Line 36: Line 44:




===First time run===
===First time run=== <!--T:12-->
This will create the hidden directory '''.secret''' and the mount point '''secret''' the first time you run it. Just answer yes to the prompts - twice. You need to use the full path.
This will create the hidden directory '''.secret''' and the mount point '''secret''' the first time you run it. Just answer yes to the prompts - twice. You need to use the full path.
During first time run you will also be prompted for the encryption mode; '''x''' for expert or '''p''' for paranoia mode. We will pick '''p''' which is a good mode.
During first time run you will also be prompted for the encryption mode; '''x''' for expert or '''p''' for paranoia mode. We will pick '''p''' which is a good mode.


<!--T:13-->
Next you will be prompted for your password. Make it long and hard to crack but don't forget it - if you do; there is no way of recovering your data.
Next you will be prompted for your password. Make it long and hard to crack but don't forget it - if you do; there is no way of recovering your data.


<!--T:14-->
Confirm the password and that's it you are finished.
Confirm the password and that's it you are finished.




===Regular use===
===Regular use=== <!--T:15-->


<!--T:16-->
We have created the directory '''~/.secret''' that will contain the encrypted data and we have made it a hidden directory because we will never enter anything in it and the content will all be unreadable.
We have created the directory '''~/.secret''' that will contain the encrypted data and we have made it a hidden directory because we will never enter anything in it and the content will all be unreadable.


<!--T:17-->
The content of '''~/.secret''' will only be readable when mounted in the other directory we created: '''~/secret'''
The content of '''~/.secret''' will only be readable when mounted in the other directory we created: '''~/secret'''
The only difference between the two is the "."  
The only difference between the two is the "."  
Line 56: Line 68:
You may call your directories something completely different than .secret and secret; it is up to you. Enter the password and start entering content into ~/secret.
You may call your directories something completely different than .secret and secret; it is up to you. Enter the password and start entering content into ~/secret.


<!--T:18-->
''We never enter data into ~/.secret - that is why we have hidden it with a "."''
''We never enter data into ~/.secret - that is why we have hidden it with a "."''


<!--T:19-->
To unmount ~/secret we enter the command:
To unmount ~/secret we enter the command:


  fusermount -u ~/secret
  <!--T:20-->
fusermount -u ~/secret


<!--T:21-->
If you check the content of ~/secret now; it will be completely empty. In order to see the content again you need to mount again with  
If you check the content of ~/secret now; it will be completely empty. In order to see the content again you need to mount again with  


   encfs ~/.secret ~/secret
   <!--T:22-->
encfs ~/.secret ~/secret
and enter the password.
and enter the password.
This will mount secret as a disk you can do a simple  
This will mount secret as a disk you can do a simple  
Line 71: Line 88:




==Encrypting Dropbox==
==Encrypting Dropbox== <!--T:23-->
One of the strong points of Encfs is that it does not reserve a lot of valuable space. This makes it suitable for encrypting Dropbox content.
One of the strong points of Encfs is that it does not reserve a lot of valuable space. This makes it suitable for encrypting Dropbox content.
There is no such thing as 100% security in the cloud, so remember that some things simply do not belong there.<br>
There is no such thing as 100% security in the cloud, so remember that some things simply do not belong there.<br>
Line 80: Line 97:
Then you enter the password.
Then you enter the password.


<!--T:24-->
To access the Dropbox from another computer repeat the exact same procedure there and enter exactly the same password.
To access the Dropbox from another computer repeat the exact same procedure there and enter exactly the same password.




<!--T:25-->
That is all there is to it - your jiberish unreadable data will now be on the web (in the cloud) in the Dropbox/encrypted folder.<br>
That is all there is to it - your jiberish unreadable data will now be on the web (in the cloud) in the Dropbox/encrypted folder.<br>
It will only be readable to you after you have mounted '''~/Dropbox_unencrypted''' on your local computer.
It will only be readable to you after you have mounted '''~/Dropbox_unencrypted''' on your local computer.
Line 95: Line 114:




==GUI helpers==
==GUI helpers== <!--T:26-->
To mount and un-mount there are helpers in AUR that can make the handling easier.
To mount and un-mount there are helpers in AUR that can make the handling easier.


<!--T:27-->
* cryptkeeper - A Linux system tray applet that manages EncFS encrypted folders
* cryptkeeper - A Linux system tray applet that manages EncFS encrypted folders
* kencfs - GUI frontend for encfs. Create, mount, umount and delete your encrypted fs
* kencfs - GUI frontend for encfs. Create, mount, umount and delete your encrypted fs