dyne/tomb

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1581 stars · 162 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Tomb is a minimalist command-line tool for GNU/Linux that creates and manages encrypted storage folders ('tombs') using dm-crypt and LUKS via cryptsetup. Tombs are locked with separate key files (optionally with FIDO2 two-factor unlocking) and can be safely transported and hidden in the filesystem.

Use cases

• create encrypted folders on linux
• encrypt sensitive files with a key file
• keep secrets on a usb key separate from encrypted volume
• lock and unlock encrypted volumes from the command line
• two-factor unlock encrypted storage with a FIDO2 passkey
• quickly slam close all open encrypted volumes
• hide and transport encrypted data in a filesystem

When to choose

• you are on GNU/Linux (or WSL2 on Windows 11) and want simple, scriptable folder encryption
• you prefer minimalist, auditable shell code built on standard dm-crypt/LUKS
• you want to physically separate encryption keys from encrypted data
• you need a long-standing, battle-tested free software tool

When to avoid

• you need cross-platform encryption on macOS or native Windows
• you want full-disk encryption rather than per-volume encrypted folders
• you need a graphical-only workflow (though some GUI wrappers exist)
• you require plausibly deniable encryption features

Facets

cli-tool · maturity stable

cryptography security file-system secrets-management cli security privacy files self-hosted cli luks dm-crypt encrypted-volumes shell-script fido2 secret-management cryptsetup command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dyne/tomb")