I usually use Age, I'd like to hear your opinions.
I've used VeraCrypt successfully to encrypt volumes/folders.
It's worked great for me, although I recently started encountering issues accessing files but it seems the problem is with my external and not with the encryption method. Hopefully I can recover those files someday. Backup your backups and then backup again.
tar | gpg.I'm pretty sure there are "better" ways. Can someone please recommend?
Right now, GnuPG is absolutely safest for individual files. There's no age client for Android, and while I like it, I am allergic to encryption systems without a robust ecosystem.
Someone else just pointed out that DroidFS can read gocryptsfs directories, which greatly expands my confidence in gocryptsfs - which is my preferred short term directory solution. For archival purposes, though, tar+gpg is the only thing I trust to be available and working in a decade.
Agreed. Whenever I encrypt stuff in bulk, I usually do it purely for archiving purposes and tar seems to be the most battle-tested archiving thingie
My volumes are PLAIN dm-crypt encrypted (i.e. LUKS without the LUKS bells and whistles) and the key is stored on my Vivokey Flex implant.
I mount them using scripts that combine crypsetup and vivokey_pam, with the ubiquitous ACR122U RFID reader: the systemd service file calls my script, I present my implant to the reader and voila: the volume is mounted.
Even more impressive when someone lops his hand off and presents it to the machine and gains access to his multiple gigabytes of Stallman x Jobs fanfic.
That implant needs to be the second factor so that the bad guys also need a wrench.
DroidFS on phone and sync the folder with laptop using Syncthing. On laptop I use whatever can decrypt gocryptfs.
7zip for quick encryption of individual files. Veracrypt for portability of a large number of files.
Tbh man, I use 7zip. I mean I know it's not all that secure from law enforcement or anything because with the quantum shit going on they're gonna break that in no time.
