encfs

Create/mount encrypted directory

$ encfs [~/.encrypted] [~/private]

$ encfs -s [~/.encrypted] [~/private]

$ fusermount -u [~/private]

$ encfsctl passwd [~/.encrypted]

$ encfsctl info [~/.encrypted]

$ encfs -i [10] [~/.encrypted] [~/private]

encfs [options] encdir mountpoint

encfs provides encrypted filesystem in user-space using FUSE. It encrypts files individually, storing them in a directory with encrypted names and contents.
The tool is useful for encrypting cloud-synced folders or sensitive directories. Each file is encrypted separately, allowing efficient sync of changed files.

-s

Single-threaded mode.

Run in foreground.

Verbose mode.

Idle timeout before unmount.

FUSE mount options.

Use standard (safer) settings.

Use paranoid settings.

Reverse mode for backups.

External password program.

.encfs6.xml

Configuration file stored in the encrypted directory containing encryption parameters and settings.

Leaks file sizes and directory structure. Not resistant to watermarking attacks. Consider newer alternatives like gocryptfs. FUSE adds overhead. Passphrase recovery not possible.

encfs was created by Valient Gough in 2003. It pioneered user-space encrypted filesystems on Linux. While popular for years, security audits revealed weaknesses, leading to recommendations for alternatives like gocryptfs for new deployments.

gocryptfs(1), cryptsetup(1), fusermount(1), ecryptfs(1)