Hacker News new | ask | show | jobs
by KAMSPioneer 171 days ago
I'm a different commenter but yeah, solutions exist. For example systemd-cryptenroll let's you use a FIDO token (or TPM or PKCS#11 smartcard) to unlock your encrypted disk and it's very easy to set up. Quite literally a single command.

Windows Hello serves the same purpose for Windows, though I'm sure there are caveats/differences.

1 comments

If it's a fido hardware token you still need to make sure you have a backup token. It's a lot simpler on windows/macos where you can use biometrics for the same purpose.
You can setup multiple keys. It would be crazy not to include a simple ascii hash key in addition.