• michaelmrose@lemmy.world
    link
    fedilink
    English
    arrow-up
    50
    ·
    2 days ago

    On a single user system which either hibernates or shuts fully down you might as well long in automatically after you type in your 16 character encryption pass phrase. A login screen does not in any way provide additional security. Note this doesn’t actually prevent you from locking the screen and unlocking still requires your password.

    • ftbd@feddit.org
      link
      fedilink
      arrow-up
      9
      ·
      1 day ago

      But I think ‘encrypt home directory’ only encrypts your home partition, not your root partition. Not sure why many distros offer only this option in the graphical installer

      • michaelmrose@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        17 hours ago

        encrypt your home directory stated as such doesn’t mean encrypt ANY partition. Distros that offer this normally use ecryptfs. encrypting your partition uses LUKS. They use ecryptfs because its easy and doesn’t effect the boot up process. Full disk (or partition) uses LUKS

    • Diurnambule@jlai.lu
      link
      fedilink
      arrow-up
      6
      ·
      1 day ago

      I join that my setup. Hibernate after 15min and disk encryption and autologin on boot, but password is asked when going out of sleep for the 15 first minutes.