What it does
cryptsetup is an open-source utility for disk-encryption setup using Linux dm-crypt, including LUKS and other supported volume formats.
cryptsetup is an administrative disk-encryption tool rather than a general desktop file vault. Its README describes LUKS as an on-disk format that stores setup information in a partition header and supports multiple passwords. Plan the volume, backup and recovery arrangements before changing a disk. Read the documentation for the actual format instead of assuming that support for opening several formats means identical management features.
The LUKS FAQ separates a header/keyslot backup from a full data backup. Damage to header salts or keyslots can prevent decryption; a surviving usable keyslot or a suitable header backup may be needed. A header backup preserves older keyslots, so disabling a passphrase on the live volume does not disable that old backup. The FAQ covers both LUKS1 and LUKS2 but warns that some answers began with LUKS1; use format-specific recovery instructions.
Strengths
- LUKS and dm-crypt administration
- Several supported encrypted-volume formats
Best for
- Linux administrators planning disk-encryption deployment
Sources
- Specification and documentation (Oct 26, 2026)
- cryptsetup COPYING (Oct 26, 2026)
- cryptsetup LUKS FAQ (Oct 26, 2026)