Encrypt your disk with LUKS
Disk encryption scrambles everything on your drive until someone enters the right password at startup. If your laptop is lost or stolen, your files are just noise to whoever has it. On Linux this is called LUKS, and it's built in.
Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.
Get my free Dashboard →
Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.
The easiest time to do it
Encryption is simplest to switch on when you first install Linux. Most installers have a tickbox that says something like "Encrypt the new installation" or "Use LUKS". If you're installing or reinstalling, tick it and choose a strong passphrase. That's the whole job.
Check whether it's already on
Not sure if your current system is encrypted? Open a terminal and run lsblk -f. If you see crypto_LUKS next to your main drive, you're encrypted. If not, your files are readable by anyone who removes the drive.
Adding it to a system that isn't encrypted
Encrypting a drive you're already using is more involved, because it means backing up your files, reinstalling with encryption switched on, and restoring them. It's worth it for a laptop that leaves the house. Back up first, then reinstall with the encryption option ticked.
Remember your passphrase
There's no back door. If you forget your encryption passphrase, the data is gone for good. Store it in your password manager, and keep a backup of your important files as well.
Track your Linux security progress. Free.
Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.
Start your free security check