Tomb is a command-line tool for managing encrypted storage containers on Linux. It builds on dm-crypt, LUKS and cryptsetup rather than implementing its own underlying encryption system.
A tomb is stored as a single file which becomes an ordinary mounted directory when opened. The key used to unlock it is kept separately and is itself protected by a password. This separation makes it practical to keep the encrypted container on one device while storing its key on another.
This is free and open source software.
Key Features
- Create encrypted storage containers using established Linux dm-crypt and LUKS infrastructure.
- Keep the encrypted volume and its associated key file physically separate.
- Supports two-factor unlocking with FIDO2 passkeys.
- Open several tombs simultaneously and list active containers from the command line.
- Close individual containers or use the slam command to terminate processes using them and close them immediately.
- Resize existing tombs when additional storage space is required.
- Bind selected directories into the user’s home directory only while a tomb is open.
- Keys can be supplied through standard input, making it possible to retrieve them from remote systems without permanently storing them alongside the encrypted volume.
- Supports storing tomb files on remote or cloud-backed filesystems while keeping their contents encrypted locally.
- Keys can be hidden inside JPEG images using steganography when the required supporting utility is installed.
- Keys can be exported as printable QR codes for offline backup.
- Includes hooks which can run commands when tombs are opened or closed.
- Search facilities can operate over filenames and content inside open tombs.
Website: github.com/dyne/Tomb
Support:
Developer: Denis Roio (Jaromil) and contributors
License: GNU General Public License v3.0
Related Software
| Disk Encryption Tools | |
|---|---|
| VeraCrypt | Strong disk encryption software |
| loop-AES | Encrypt disk partitions, removable media, swap space and other devices |
| dm-crypt | Transparent disk encryption subsystem |
| cryptsetup | Configures encrypted block devices |
| GnuPG | GNU Privacy Guard - implementation of the OpenPGP standard |
| gocryptfs | Encrypted overlay filesystem written in Go |
| Tomb | System for file encryption |
| Shufflecake | Create multiple hidden volumes |
| zuluCrypt | Feature rich solution for hard drive encryption |
| cryptmount | Managing encrypted file systems |
| disk-encryption-tool | Encrypt existing Linux storage without reinstalling the system |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.