What is LUKS?

The Linux Unified Key Setup — the standard for full-disk encryption on Linux, encrypting a block device so it's unreadable without the passphrase.

How it works

LUKS is what Ubuntu's 'encrypt the installation' option uses under the hood. It protects the entire disk at rest; once you boot and unlock it, the running system reads normally. Lose the passphrase and the data is unrecoverable.

Example

In practiceYou enable LUKS at install; at every boot you enter the passphrase to unlock the root partition before the system starts.

Can I recover LUKS data without the passphrase?

No — that's the point. Store a recovery key somewhere safe and offline when you set it up.

Go deeper: Build a Hardened Linux Workstation

The complete, step-by-step guide — every command, config, and the reasoning behind it.

Get the guide