Tag: encryption

Client-side encryption with rclone crypt keeps your cloud backups opaque to providers. Key management, filename encryption, and restore drills for B2, S3, Drive.

systemd-homed turns your home dir into a portable LUKS-encrypted blob. Move it between machines, unlock with FIDO2, and own your own data.

Stop typing LUKS passphrases on every headless reboot. Tang + Clevis = NBDE: disks unlock automatically on your trusted network, stay sealed everywhere else.

Use age + age-plugin-yubikey to encrypt files with a key that literally cannot leave your hardware token. No GPG drama required.

Native ZFS dataset encryption vs LUKS under your pool, which layer to encrypt at, performance trade-offs, key management, and raw send/recv.

age replaces GPG for file encryption with a sane CLI, SSH key reuse, and zero key management drama. Here's how they compare and exactly when each one wins.