fscrypt is a high-level command-line utility for managing Linux native filesystem encryption on supported filesystems.
It provides a consistent interface for setting up encrypted directories, managing protectors and policies, and working with the kernel’s native filesystem encryption support on filesystems such as ext4 and f2fs.
This is free and open source software.
Key Features
- Supports protectors based on a login passphrase, a custom passphrase, or a raw 256-bit key.
- Includes commands for encrypting directories and for locking, unlocking, and checking the status of encrypted directories.
- Can integrate with PAM through
pam_fscrypt.soso login passphrase-protected directories can be unlocked automatically during login sessions. - Can generate a recovery passphrase for login passphrase-protected directories created on non-root filesystems.
- Provides metadata management capabilities for creating protectors and working with filesystem encryption policies.
Website: github.com/google/fscrypt
Support:
Developer: Google
License: Apache License 2.0

fscrypt is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| CLI File Encryption Tools | |
|---|---|
| SOPS | Editor of encrypted files |
| age | Simple file encryption tool |
| GnuPG | Implementation of the OpenPGP standard |
| Sequoia PGP | Comprehensive OpenPGP implementation |
| horcrux | File splitter with encryption and redundancy |
| rage | Simple encryption tool using the age format |
| Kryptor | Simple, modern, and secure file encryption and signing tool |
| transcrypt | Transparently encrypt sensitive files stored in Git repositories |
| Picocrypt | Very small (hence Pico), very simple, yet very secure encryption tool |
| enc | Designed as a modern, approachable alternative to GnuPG |
| ccrypt | Tool for encrypting and decrypting files and streams |
| Encpipe | Billed as the simplest encryption tool in the world |
| Volaris | Encryption tool designed to prioritize privacy and security |
| sigtool | Sign, verify, encrypt and decrypt files from the command line |
| eddy | Simple and fast CLI file encryption |
| Xecrets Cli | AxCrypt compatible encryption tool |
| nacrypt | Simple and easy-to-use file encryption utility |
| agevault | Encrypt and decrypt directories securely using age |
| v02enc | Symmetric encryption for multiple recipients |
| PurrCrypt | Fur-ociously secure encryption tool |
Read our verdict in the software roundup.
Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |


Please read our Comment Policy before commenting.