LUKS (Linux Unified Key Setup) is the standard disk-encryption specification for Linux, implemented by the cryptsetup utility. It provides a header format and key-slot system on top of the dm-crypt kernel module, supporting multiple decryption passphrases per volume.
Reviewed by Marco Wollank
Rate LUKS: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
LUKS is the de-facto disk encryption standard on Linux, shipped in every major distribution and used as the foundation by higher-level tools like Tomb and most graphical installers. The key-slot design lets you add up to eight separate passphrases or key files to a single encrypted volume, which is useful for backup keys and multi-user setups. It is a low-level building block rather than an end-user application, so setup is done at the command line or through a distribution installer. Reach for LUKS directly if you want full control over your Linux partition encryption; use a wrapper like Tomb or your distro’s installer if you want a guided experience.
LUKS alternatives
PrivacyNotes Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
FileVault FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
BitLocker BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
VERNAM A free, fully client-side file encryptor that runs in your browser. Drop in any file, set or generate a passphrase, and it seals the result into its own .vrn format. Nothing is ever uploaded, and it works offline.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
* Average ratings will show on this page once the threshold of 5 ratings is reached.