I got a very simple question about using LUKS/cryptsetup with a keyfile on a separate USB stick. Does it always have to be mounted? Or only when the system boots?
1 Answer
No. The key only has to be mounted at boot. After mounting the encrypted drive, the usb stick can be removed from the device.