Switch to Linux Reason #62: Choose who holds the keys to your files

Why this matters now

Encryption is only as independent as its key management and recovery path. A convenient account-based recovery arrangement may be unacceptable for highly sensitive material. Ubuntu documents LUKS-based full-disk encryption and passphrase-based unlocking. Encryption protects data at rest on a lost device when configured correctly; it does not protect an unlocked session or online account (Ubuntu full-disk encryption).

What changes with Linux

Linux supports passphrase-managed disk encryption and separately chosen backup encryption. This lets you decide who can unlock each copy. Nextcloud documents file access, synchronization, sharing, versioning, and ownership transfer for servers users can choose. Self-hosting adds administration responsibility but makes the storage provider a choice (Nextcloud files and synchronization). Debian documents local user accounts, groups, privilege separation, and sudo. Those ordinary system controls let a person manage access without making a cloud identity the root of every desktop task (Debian authentication and access controls).

Make the move

Document where keys and recovery codes are stored, including for family emergencies. Never keep the only backup and its only key on the same computer.

A Linux installation does not erase data already collected or make every app private. Choose a maintained distribution, check its data practices, protect your accounts, and keep tested backups.

Take the power back