I'm trying to set up Linux Mint with encryption that matches what I use on Windows with Veracrypt, but I'm running into some serious limitations. The installation options for encryption in Mint are confusing and seem really narrow. It looks like I'm stuck with LUKS (though it's not clear if it's LUKS1 or LUKS2), a single layer of AES256, and some basic SHA hashing. It's supposed to be full disk encryption (FDE), but it seems not as effective since it doesn't replace the bootloader like Veracrypt does. Why does it feel like I just have to accept these defaults without any customization? Am I really going to have to switch to a less common distro to get decent encryption options? I just want what feels like the same level of security I get on Windows without the hassle. I didn't expect to have this much difficulty on Linux when it comes to safety and privacy!
4 Answers
In most distros today, LUKS2 is used by default and it provides AES256 with SHA256. If you feel like the Mint setup lacks options, it's mainly due to how the installer is designed to keep things simple for new users. If you dig into LUKS documentation, you'll find that you can customize it more than you might think. It can be super secure, and many people trust it even more than Veracrypt.
I get where you're coming from. Windows' Bitlocker also doesn't offer many options openly. What you see is more about the installer choices than the actual underlying security capabilities. If you want more control, try installing it manually using the command line. LUKS can provide a solid security configuration if you go that route.
You've got a point about Mint's installer; it does simplify things and might not offer the depth you're looking for. It uses Ubiquity, which is meant for ease of use for most users. If you're comfortable with Veracrypt, you can definitely use it on Linux too, but setting that up requires some manual work outside the installer. If you really want to dive deeper into encryption, it's worth learning about LUKS and how to configure it yourself after the installation.
Thanks for the clarification! I'll check out LUKS and see if I can get something workable.
If you want a distro with more control, maybe consider something like Arch. Mint is great for beginners but it keeps things simple to avoid overwhelming new users with too many options. It sounds like LUKS is robust enough for your needs, but you might just have to set it up manually to get what you want.
Good point! I might have to try that and see if I can get the customizable setup I’m looking for.
That's interesting! So it mostly comes down to the installer not showing all those options? I'll have to look into that.