<h1 id="luks">Introduction to <i>LUKS</i></h1>

<h1 id="luks">Introduction to <i>LUKS</i></h1>

The GNOME desktop*Disks* utility allows you to opencreate encrypted volumes.

The *Disks* utility allows you to create encrypted volumes.

Such encrypted volumes are not hidden. <p>An attacker in possession of the device can know that there is an encrypted
volume on it. Take into consideration that you can be forced or tricked to give
out its passphrase.</p>

<p>An attacker in possession of the device can know that there is an encrypted
volume on it. Take into consideration that you can be forced or tricked to give
out its passphrase.</p>

<h2 id="comparison">Comparison between <i>LUKS</i> and <i>VeraCrypt</i></h2>

<h2 id="comparison">Comparison between <i>LUKS</i> and <i>VeraCrypt</i></h2>

<h2 class="bullet-number-three">Create a new1 id="creating">Creating an encrypted partition</h21>

<h1 id="creating">Creating an encrypted partition</h1>

<h2 id="identifying">Identifying your external storage device</h2>

The *Disks* utility lists all the current storage
devices on the left side of the screen.

The *Disks* utility lists all the current storage devices on the left side of the screen.

A new device appears in the list of storage devices. Click on it:.

A new device appears in the list of storage devices. Click on it.

<h2 class="bullet-number-twoid="formatting">Formatting the device</h2>

<h2 id="formatting">Formatting the device</h2>

In the **Format Disk** dialog:

In the **Format Disk** dialog:

If you want to securely erasoverwrite all data on the device, choose to <span class="guilabel">**Overwrite existing data with zeroes</span>** in the **Erase** drop-down listmenu.

If you want to overwrite all data on the device, choose **Overwrite existing data with zeroes** in the **Erase** menu.

Click **Format**.

<h2 class="bullet-number-threeid="partition">Createing a new encrypted partition</h2>

<h2 id="partition">Creating a new encrypted partition</h2>

In the **Format DiskVolume** dialog:

In the **Format Volume** dialog:

**Volume Name**: y You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

**Type**: c Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

<div class="tip">

<div class="tip">

<h2 class="bullet-number-fourid="using">Useing the new partition</h2>

<h2 id="using">Using the new partition</h2>

<h1 id="opening">Opening an existing encrypted partition</h1>

<h1 id="opening">Opening an existing encrypted partition</h1>

To close the partition aAfter you finished using ithe partition, click on the **[[!img lib/media-eject.png
alt="Eject" class="symbolic" link="no"]]** button next to the partition in the
sidebar of the f*Files* browser. to eject the partition safety and lock again the
encryption.

After you finished using the partition, click on the [[!img lib/media-eject.png
alt="Eject" class="symbolic" link="no"]] button next to the partition in the
sidebar of the *Files* browser to eject the partition safety and lock again the
encryption.