encfs

user-space encrypted filesystem using FUSE

TLDR

Create/mount encrypted directory

$ encfs [~/.encrypted] [~/private]

Create with standard mode

$ encfs -s [~/.encrypted] [~/private]

Unmount encrypted directory

$ fusermount -u [~/private]

Change password

$ encfsctl passwd [~/.encrypted]

Show volume info

$ encfsctl info [~/.encrypted]

Idle timeout unmount

$ encfs -i [10] [~/.encrypted] [~/private]

SYNOPSIS

encfs [options] encdir mountpoint

encfs provides encrypted filesystem in user-space using FUSE. It encrypts files individually, storing them in a directory with encrypted names and contents.The tool is useful for encrypting cloud-synced folders or sensitive directories. Each file is encrypted separately, allowing efficient sync of changed files.

PARAMETERS

-s

Single-threaded mode.

-f

Run in foreground.

-v

Verbose mode.

-i minutes

Idle timeout before unmount.

-o options

FUSE mount options.

--standard

Use standard (safer) settings.

--paranoid

Use paranoid settings.

--reverse

Reverse mode for backups.

--extpass cmd

External password program.

CONFIGURATION

.encfs6.xml

Configuration file stored in the encrypted directory containing encryption parameters and settings.

INSTALL

sudo apt install encfs

sudo pacman -S encfs

sudo apk add encfs

sudo zypper install encfs

brew install encfs

CAVEATS

Leaks file sizes and directory structure. Not resistant to watermarking attacks. Consider newer alternatives like gocryptfs. FUSE adds overhead. Passphrase recovery not possible.

HISTORY

encfs was created by Valient Gough in 2003. It pioneered user-space encrypted filesystems on Linux. While popular for years, security audits revealed weaknesses, leading to recommendations for alternatives like gocryptfs for new deployments.

RESOURCES

Source code