From a7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83 Mon Sep 17 00:00:00 2001
From: Francis Rowe
- Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols) and when the installer asks you to setup - encryption (ecryptfs) for your home directory, select 'Yes'. + Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols). +
+ ++ when the installer asks you to setup + encryption (ecryptfs) for your home directory, select 'Yes' if you want to: LUKS is already secure and performs well. Having ecryptfs on top of it + will add noticeable performance penalty, for little security gain in most use cases. This is therefore optional, and not recommended. + Choose 'no'.
@@ -183,6 +189,10 @@ ecryptfs +
+ If you didn't encrypted your home directory, then you can safely ignore this section. +
+
Immediately after logging in, do that:
$ sudo ecryptfs-unwrap-passphrase
--
cgit v1.2.3-54-g00ecf