Rphl_Mstl
Rphl_Mstl
Jun 22 · 2 min read

Quick guide on how to encrypt a USB key with LUKS, the Linux Unified Key Setup disk encryption standard.

The goal here is to create a USB key or disk containing 2 partitions:

  • A standard FAT32 partition compatible with any system, to keep your USB key useful in any situation
  • A passphrase protected partition to store sensible data from a Linux system

I’ll be using Disks on Gnome (gnome-disk-utility 3.32.1).

Encrypted USB key prompt

First step : format the USB key as an Extended partition. This will allow you to create multiple child partitions.

Creating an Extended partition

Then create a standard FAT32 partition compatible with Windows, MacOS and Linux to store your documents. This partition won’t be protected.

Extended partition divided into 2 volumes : one FAT32 partition and free space for LUKS

With the remaining space, create a EXT4 partition and check the “Password protected volume (LUKS)” option. Enter a strong passphrase.

EXT4 with LUKS protection

Done. When plugging the key to a system, the FAT32 volume will automatically mount, while the LUKS volume prompts for the passphrase.

FAT32 is mounted / EXT4 requires the passphrase

Tech notes and Geek stuff

Tech & Geek stories, about Linux systems, Raspberry projects, FOSS, Photos & image manipulation, Voxels and pixel art

Rphl_Mstl

Written by

Rphl_Mstl

OS explorer, UI & UX passionate, Voxels crafter, code lover, Video Games player, Podcasts listener, Music amateur // Digital Publishing professional

Tech notes and Geek stuff

Tech & Geek stories, about Linux systems, Raspberry projects, FOSS, Photos & image manipulation, Voxels and pixel art

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade