My Question is: I'd like to use my Raspbian encrypted, just like it is standard on Debian, Ubuntu or other Linux-Distros.

My Problem: Technically, you are not installing Raspbian on a Raspberry Pi or a SD-Card, instead you are copying a prepared image from the internet. Is there a way to perform an encryption of the whole system? (maybe without /boot)

  • Wouldn't truecrypt do the job? truecrypt.org you can choose if you want full system encryption or just parts of the partition. – justanotherhobbyist Oct 11 '13 at 21:59
  • 2
    @hustlerinc TrueCrypt can only boot Windows from an encrypted disk/partition. While you could encrypt the Raspbian partition, you wouldn't be able to boot from it anymore. – n.st Oct 12 '13 at 13:17
  • 2
    Raspbian is Debian, and you should be able to use it to do the same things -- just not via an installer, obviously, which will complicate encrypting the entire system. AFAICT they use dm-crypt: en.wikipedia.org/wiki/Dm-crypt – goldilocks Oct 12 '13 at 14:39

I would use TrueCrypt. Some of it's main features (from the site) include:

  • Creates a virtual encrypted disk within a file and mounts it as a real disk.
  • Encrypts an entire partition or storage device such as USB flash drive or hard drive.
  • Encryption is automatic, real-time (on-the-fly) and transparent.
  • Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted.
  • Encryption can be hardware-accelerated on modern processors.
  • Provides plausible deniability, in case an adversary forces you to reveal the password:
    Hidden volume (steganography) and hidden operating system.

Other Raspberry Pi forum users have tried it and found it to work pretty well. There are some instructions on that forum post on how to do it yourself. The explanation is pretty lengthy, so I won't post that here.

Also, Berryboot OS offers LUKS full disk encryption out of the box.


the full system encryption will consume too much processing power for decryption and re-encryption, so you'll effectively bring your processor down to the knees just by reading or writing a file, rendering your system too slow and useless.

you should reconsider your requirements and maybe encrypt your user files only, that's faster and easier. you may follow the following link for detailed explanation.


Here is a how-to on doing as you asked.

"Don't let those who can't stop you...."


  • 2
    Summarize the information from the link in your post. – tlhIngan Jun 30 '16 at 9:01

protected by goldilocks Jun 29 '16 at 17:19

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.