# dyne/tomb

the Crypto Undertaker

Repository: https://github.com/dyne/tomb
Canonical: https://ross.abutalabs.com/products/tomb
Homepage: https://dyne.org/software/tomb
Language: Shell
License: GPL-3.0
License Family: copyleft
Topics: shell, dyne, crypto, luks, encryption, linux, secret-management, keys, files, filesystem
Last push: 2025-12-16T03:47:57+00:00

## Health v2 (maintenance only)
Score: 58/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 57, release rhythm 35, longevity 100
- inputs: {"age_days": 5572, "days_push": 260, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1581, forks 162 (observed 2026-08-28T04:05:07.020270+00:00)

## What it is
Tomb is a minimalist command-line tool for GNU/Linux that creates and manages encrypted storage folders ('tombs') using dm-crypt and LUKS via cryptsetup. Tombs are locked with separate key files (optionally with FIDO2 two-factor unlocking) and can be safely transported and hidden in the filesystem.

## Use cases
- create encrypted folders on linux
- encrypt sensitive files with a key file
- keep secrets on a usb key separate from encrypted volume
- lock and unlock encrypted volumes from the command line
- two-factor unlock encrypted storage with a FIDO2 passkey
- quickly slam close all open encrypted volumes
- hide and transport encrypted data in a filesystem

## When to choose
- you are on GNU/Linux (or WSL2 on Windows 11) and want simple, scriptable folder encryption
- you prefer minimalist, auditable shell code built on standard dm-crypt/LUKS
- you want to physically separate encryption keys from encrypted data
- you need a long-standing, battle-tested free software tool

## When to avoid
- you need cross-platform encryption on macOS or native Windows
- you want full-disk encryption rather than per-volume encrypted folders
- you need a graphical-only workflow (though some GUI wrappers exist)
- you require plausibly deniable encryption features

## Facets
- artifact type: cli-tool
- maturity: stable
- function: cryptography, security, file-system, secrets-management, cli
- domain: security, privacy, files, self-hosted
- platform: cli
- tags: luks, dm-crypt, encrypted-volumes, shell-script, fido2, secret-management, cryptsetup, command-line, linux

## Member repositories
- dyne/tomb (main) score 58

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:07.020270+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:56:33.225778+00:00, confidence not recorded.
  - readme: https://github.com/dyne/tomb (fetched 2026-08-28T04:05:07.020270+00:00, sha 9b9ec45941d6)
  - homepage: https://dyne.org/software/tomb (fetched 2026-08-29T11:26:43.467655+00:00, sha 9d981d712734)
  - site_page: https://dyne.org/ (fetched 2026-08-29T11:26:43.477135+00:00, sha ce0818955755)
- Data as of 2026-08-30T08:39:29.467469+00:00.