# LUKS

32 Hacker News commenters recommended LUKS and 6 criticized it, November 2025 to November 2026. It was recommended in 13 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Linux's standard disk encryption, praised for flexible multiple keys, transparent kernel-level operation and years of reliable use. Critics point to recurring flaws and an unencrypted header.

## Why people recommend it

- Best practice for at-rest encryption (3 comments): "I would recommend, just in case, to set up LUKS on your server." ([source](https://news.ycombinator.com/item?id=45920525)) "use LUKS unless you really need the features of ZFS native enc" ([source](https://news.ycombinator.com/item?id=49498158)) "best practice is always to encrypt with luks" ([source](https://news.ycombinator.com/item?id=46896636))
- Multiple keys, any one unlocks (2 comments): "Keyslots are alternatives, not requirements, so a TPM slot and a passphrase slot coexist and either one alone unwraps the master key." ([source](https://news.ycombinator.com/item?id=49665447)) "LUKS allows you to set up multiple entry keys, so use two, either of which will grant access to the drive." ([source](https://news.ycombinator.com/item?id=48170438))
- Reliable for years of use (2 comments): "used LUKS encryption on a system76 laptop for 7 years and it worked fine" ([source](https://news.ycombinator.com/item?id=48547547)) "was using LUKS + EXT4 -- with no issues whatsoever" ([source](https://news.ycombinator.com/item?id=48732255))
- Easy to understand and robust (2 comments): "or LUKS on Linux.. heck, even Veracrypt is actually easier to understand and more robust." ([source](https://news.ycombinator.com/item?id=48764268)) "LUKS2 + Systemd make it so easy to implement." ([source](https://news.ycombinator.com/item?id=50226936))

## What people warn about

- Known flaws and information disclosure (3 comments): "LUKS isn't all rainbows and butterflies either. This vulnerability has been known for years, and despite this, nothing has been done to address it." ([source](https://news.ycombinator.com/item?id=46745539)) "loaded with caveats and gotchas especially related to LUKS2 information disclosure" ([source](https://news.ycombinator.com/item?id=46970302)) "TPM-based encryption on Linux remains quite flawed, and has been for years now" ([source](https://news.ycombinator.com/item?id=46742829))

## Alternatives hackers recommend

- [VeraCrypt](https://hackerapproved.com/p/veracrypt.md): 45 recommend
- [Microsoft BitLocker](https://hackerapproved.com/p/bitlocker.md): 45 recommend
- [TrueCrypt](https://hackerapproved.com/p/truecrypt.md): 9 recommend
- [FileVault](https://hackerapproved.com/p/filevault.md): 8 recommend
- [systemd-cryptenroll](https://hackerapproved.com/p/systemd-cryptenroll.md): 7 recommend

## Cite as

Hacker Approved, "LUKS", https://hackerapproved.com/p/luks/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).