Hi, thank you for the information, really great one. Can you please add a links How to do all this process from the Jumpcloud Admin console and to make it as a Policy or Command atleast for the deployment? Thank you
Hi. I followed the instruction. Everything went well but I never received the pop-up to set the passphrase. I thought maybe it was not completed so I tried to start over but I received the message " it appears your home directory has been already encrypted." However, when I checked all recommended codes to check if my home is encrypted or not, none of them showed my home drive to be encrypted! Can you please help me with how can I fix it?
Run this command and enter your password, you'll get your passphrase. It's also mentioned in document here: jumpcloud.com/blog/how-to-encrypt-ubuntu-20-04-desktop-post-installation See Step 4B
I did research into this. The files are unencrypted at the time of login and are available until the computer is turned off. a this means they are available to other users with sudo access. So if there is another account with a weaker/known password, that could still give someone access to the encrypted data.
@@bengarrison5394 what about if the computer is shutdown suddenly? Are the unencrypted files stored on disk in any way that requires a clean shutdown to remove them?
Encryption, depending on the amount of data, could have an impact to some performance. It's better to have full disk encryption from the beginning. The decryption starts after a login is provided that has access to the data. This is where your performance impact might come in.
Hi could you provide the steps to undo this whole encryption for a person who followed and applied this tutorial steps?
If i follow this and encrypt home directory, then is this same as disk encryption? Or disk encryption is different than this? Can you please clarify?
how can you test the encryption has worked?
Hi, thank you for the information, really great one. Can you please add a links How to do all this process from the Jumpcloud Admin console and to make it as a Policy or Command atleast for the deployment? Thank you
Hi. I followed the instruction. Everything went well but I never received the pop-up to set the passphrase. I thought maybe it was not completed so I tried to start over but I received the message " it appears your home directory has been already encrypted." However, when I checked all recommended codes to check if my home is encrypted or not, none of them showed my home drive to be encrypted! Can you please help me with how can I fix it?
ecryptfs-unwrap-passphrase
Run this command and enter your password, you'll get your passphrase. It's also mentioned in document here: jumpcloud.com/blog/how-to-encrypt-ubuntu-20-04-desktop-post-installation
See Step 4B
Thanks make video on other partition encryption
I used this technique in my machine. My question is how can I check that it is working correctly?
Open terminal and type in ls -A /home ... If you see the .ecryptfs folder, then your home folder is encrypted
@@bengarrison5394 I can see the folder. Thank you.
Thank You!
At what point does the data become unencrypted? When you login after fresh reboot?
I did research into this. The files are unencrypted at the time of login and are available until the computer is turned off. a this means they are available to other users with sudo access. So if there is another account with a weaker/known password, that could still give someone access to the encrypted data.
@@shadoninja Yes correct. Which is why a full disk encryption is the preferred go to method.
@@bengarrison5394 what about if the computer is shutdown suddenly? Are the unencrypted files stored on disk in any way that requires a clean shutdown to remove them?
does it slow my computer cause im using ubuntu as my main OS
Encryption, depending on the amount of data, could have an impact to some performance. It's better to have full disk encryption from the beginning. The decryption starts after a login is provided that has access to the data. This is where your performance impact might come in.
@@bengarrison5394 i see, thanks
OOBOONTOO
Ls: cannot access ~ben: no such file or directory