# systemd-cryptenroll

7 Hacker News commenters recommended systemd-cryptenroll and 2 criticized it, November 2025 to November 2026. It was recommended in 5 of 13 months.

**Verdict:** Free Linux tool for setting up TPM-backed LUKS disk encryption, praised as simple to set up. Critics note an unfixed issue, linked to a systemd pull request.

## Why people recommend it

- Easy to set up (2 comments): "I didn't find it too difficult to set up TPM backed encryption on Arch using systemd-cryptenroll" ([source](https://news.ycombinator.com/item?id=48148485)) "it's very easy to set up. Quite literally a single command." ([source](https://news.ycombinator.com/item?id=46359099))
- Simpler TPM-backed disk encryption (3 comments): "I didn't find it too difficult to set up TPM backed encryption on Arch using systemd-cryptenroll" ([source](https://news.ycombinator.com/item?id=48148485)) "These days with cryptenroll and friends, using the TPM is hardly an issue anymore." ([source](https://news.ycombinator.com/item?id=49664696)) "seal the LUKS key in TPM2 tied to PCR values using systemd-cryptenroll" ([source](https://news.ycombinator.com/item?id=47272596))

## What people warn about

- Known feature gap not yet fixed (2 comments): "Cryptenroll doesn't ( https://github.com/systemd/systemd/pull/27502 ), which is bad but has not been fixed." ([source](https://news.ycombinator.com/item?id=48137163)) "Cryptpentroll does not do this at all" ([source](https://news.ycombinator.com/item?id=48133491))

## Alternatives hackers recommend

- [VeraCrypt](https://hackerapproved.com/p/veracrypt.md): 45 recommend
- [Microsoft BitLocker](https://hackerapproved.com/p/bitlocker.md): 45 recommend
- [LUKS](https://hackerapproved.com/p/luks.md): 32 recommend
- [TrueCrypt](https://hackerapproved.com/p/truecrypt.md): 9 recommend
- [FileVault](https://hackerapproved.com/p/filevault.md): 8 recommend

## Cite as

Hacker Approved, "systemd-cryptenroll", https://hackerapproved.com/p/systemd-cryptenroll/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).