Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

How do I check if a partition is encrypted? In particular I would like to know how I check if /home and swap is encrypted.

share|improve this question
add comment

2 Answers

up vote 8 down vote accepted

Regarding the standard home encryption provided by Ubuntu, you can

sudo ls -lA /home/username/

and if you get something like

totale 0
lrwxrwxrwx 1 username username 56 2011-05-08 18:12 Access-Your-Private-Data.desktop -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.desktop
lrwxrwxrwx 1 username username 38 2011-05-08 18:12 .ecryptfs -> /home/.ecryptfs/username/.ecryptfs
lrwxrwxrwx 1 username username 37 2011-05-08 18:12 .Private -> /home/.ecryptfs/username/.Private
lrwxrwxrwx 1 username username 52 2011-05-08 18:12 README.txt -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.txt

then the username's home directory is encrypted. This works when username is not logged in, so the partition is not mounted. Otherwise you can look at mount output.

About the swap, do

sudo blkid | grep swap

and should check for an output similar to

/dev/mapper/cryptswap1: UUID="95f3d64d-6c46-411f-92f7-867e92991fd0" TYPE="swap" 
share|improve this answer
    
So if I get /dev/sda4: UUID="6ba2ce7b-a355-41ea-8739-2ac5d6880bac" TYPE="swap" the swap is not encrypted? –  N.N. Jul 15 '11 at 19:30
    
I suppose you're right, but my limited knowledge cannot exclude there are other swap encryption methods. –  enzotib Jul 15 '11 at 19:45
    
If you get that, your swap is definitely NOT encrypted. –  David Jul 16 '11 at 1:47
    
Okay I recieved /dev/mapper/cryptswap1: UUID="b7a9977e-c5ec-4208-a022-c55ce4a62a65" TYPE="swap" so I assume, as David has said my drive is not encrypted? –  Christopher Stansbury Aug 12 '11 at 16:12
    
@ChristopherStansbury (Yes, yes, I'm more than two years late; this is for anyone that stumbles on the question in future) au contraire, the "/dev/mapper/cryptswap" implies that your swap is encrypted. –  Darael Dec 2 '13 at 15:26
add comment

In addition to the answer provided by enzotib, there's the possibility of full disk encryption as provided by the alternate installer. (Also called LUKS-crypt.)

You can use sudo dmsetup status to check if there are any LUKS-encrypted partitions. The output should look something like:

ubuntu-home: 0 195305472 linear 
ubuntu-swap_1: 0 8364032 linear 
sda5_crypt: 0 624637944 crypt 
ubuntu-root: 0 48824320 linear

The line marked "crypt" shows that sda5 has been encrypted. You can see which filesystems are on that via the lvm tools.

In the case of LUKS encryption, the Disk Utility in Ubuntu will also show the encryption layer and the configuration in a graphical manner.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.