Results 1 to 4 of 4

Thread: full disk encryption vs home folder encryption

  1. #1
    Join Date
    May 2008
    Beans
    51

    full disk encryption vs home folder encryption

    I'm getting a new laptop in a week or so and wondering which way to go as far as encryption. The two options seem to be full disk via the alternate and/or home disk.

    I'm looking to secure my personal data without interfering with performance as much as I can. I'm leaning toward the home folder encryption, but I was wondering if I'd be missing a major benefit by not going with full disk.

    Any opinions on this?
    What are most laptop users going with?
    Nick
    My Blog

  2. #2
    Join Date
    May 2006
    Location
    100acrewood
    Beans
    7,480
    Distro
    Kubuntu 14.04 Trusty Tahr

    Re: full disk encryption vs home folder encryption

    If you want to protect your personal data only, then do /home only for performance reasons. If you are a paranoid, also encrypt root so nobody can install spyware on your PC while you are not at home.

    I recommend /home only.

  3. #3
    Join Date
    Nov 2009
    Beans
    919
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: full disk encryption vs home folder encryption

    It's not really a matter of which is better, but of which more suits your specific needs. For example, how likely is it that someone else could get physical access to it? If it never leaves the house then /home should be fine (though that's not really what laptops are all about I suppose). If it does leave the house, but you don't expect it to leave your sight/possession at any time, then /home should also be OK.

    Also, it depends greatly on the nature of the personal data itself. Does the data need to be stored locally on the system in order for you to carry out whatever function you plan to with it? If not, there's always the option of keeping it on external media and leaving that at home when you've got the laptop out with you (and encrypted on the external drive, if you like).

    Either way, the thing to do is first accurately identify the likely risks that are specific to your situation, and then act accordingly. Unless of course you're also genuinely interested in experimenting with various information security approaches, which I always like to encourage.

  4. #4
    Join Date
    Oct 2005
    Location
    Al Ain
    Beans
    7,909

    Re: full disk encryption vs home folder encryption

    As mentioned above, the more you encrypt, the more difficult it will be for an attacker with full access to your computer, to subvert it.

    However, someone with full access to your computer will always be able to subvert it one way or another.

    So even for government use with secret classification, we just encrypt /home and /swap and ensure that /tmp is using tmpfs (a RAM disk).

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •