My laptop isn't under my supervision most of the time. And I'd hate it if someone were to steal my SSD, or whole laptop even, when I'm not around. Is there a way to encrypt everything, but still keep the device in sleep, and unclock it without much delay. It's a very slow laptop. So decryption on login isn't viable, takes too long. While booting up also takes forever, so it needs to be in a "safe" state when simply logged out. Maybe a way that's decrypt-on-demand?

I'm on Arch with KDE.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 years ago (1 child)

openSUSE also has a simple FDE setup. Just check a box and enter a passphrase during install. It's not default, but it's about as easy as possible to set up.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 years ago

    Useful to know, thanks.

    For the record, I once had a bad experience with the Debian installer's version. That is why I will not be trying Debian again. Installation is a moment of vulnerability, when you don't have ready access to your data, or the network, and this is one extra factor. IMO it really is non-negotiable for a distro to provide a bulletproof installation experience.

  • source
  • parent