This is an automated archive made by the Lemmit Bot.

The original was posted on /r/fedora by /u/hieroschemonach on 2025-11-05 14:02:20+00:00.


I already to try to follow the best practices I can

  • Using a long password.
  • Installing apps as Flatpak so they are isoloated.
  • Not installing theme/plugins with no reputation. I don’t trust a GitHub repo or a theme with 0/low reviews.
  • I am already using Fedora Silverblue which makes review of the config modification in /etc is super easy and /usr is readonly so it’s already safe.

So, far this has worked well for me but now I have to travel and I need to add encryption at rest to my data and I am looking into data encryption options.

I have 2 SSDs in my laptop, one contains data (Ext4) and one contains the OS (root + home) (btrfs).

Now, when it comes to encryption I have few doubts and I don’t know where to ask or which one makes more sense.

  1. What is the best way to encryt data in secondary drive? It used to auto mount at boot but I am okay with manually entering the password after each login.
  2. How many options I have for only encrypting the user data without using a full disk encryption because FDE requires a reinstall.
  3. What are the risks for data loss in situations where I have to force press the power button to shut down the laptop.
  4. Do you encrypt your external backup SSD?