google/fscrypt

Health v2 · maintenance only

Adoption not part of the score

1028 stars · 110 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

fscrypt is a Go command-line tool for managing Linux native filesystem encryption (fscrypt API) on filesystems like ext4 and f2fs. It handles metadata, key generation and wrapping, PAM integration, and provides a uniform interface for creating, locking, and unlocking encrypted directories.

Use cases

• encrypt directories on ext4 or f2fs with Linux native filesystem encryption
• unlock encrypted directories automatically at login via PAM
• manage encryption keys and protectors for fscrypt
• set up per-directory encryption on a Linux system
• lock and unlock encrypted folders from the command line

When to choose

• you want per-directory encryption using the kernel's native fscrypt API rather than full-disk encryption
• you need automatic unlocking of encrypted directories tied to your login passphrase
• you want a high-level, maintained tool instead of the low-level fscryptctl

When to avoid

• your filesystem does not support the Linux native fscrypt API (e.g., you need something other than ext4/f2fs)
• you need full-disk or block-device encryption such as LUKS/dm-crypt
• you need cross-platform encryption like eCryptfs or gocryptfs

Facets

cli-tool · maturity active

cryptography file-system security cli security privacy operating-systems files cli go filesystem-encryption ext4 f2fs pam argon2 disk-encryption linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/fscrypt")