{"id":104600,"date":"2023-12-01T11:00:00","date_gmt":"2023-12-01T16:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=104600"},"modified":"2024-07-18T11:55:27","modified_gmt":"2024-07-18T15:55:27","slug":"how-to-enable-full-disk-encryption-on-debian-11","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11","title":{"rendered":"How to Enable Full Disk Encryption on Debian 11"},"content":{"rendered":"\n<p><a class=\"wp-block-cgb-button button\" href=\"#heading2\">Jump to Tutorial<\/a><\/p>\n\n\n\n<p>In today\u2019s digital age, individuals and organizations are dealing with increasingly sensitive and confidential information. This information includes personal identity information, banking information, medical records, trade secrets, etc. Any data exfiltration can lead to significant losses and risks, including legal and reputational harm.<\/p>\n\n\n\n<p>Encryption has become a necessary technology to protect this sensitive data. The basic principle of encryption is to transform data into an unreadable form and protect it using a key. Only authorized users can decrypt and access the data. This ensures that data is not accessed or stolen without authorization during transmission and storage.<\/p>\n\n\n\n<p>Full disk encryption (FDE) technology can secure the entire storage medium, protecting all data stored on it. If the computer is stolen or subjected to other forms of attack, the encrypted data cannot be stolen. In addition, encryption can also help to meet data security and privacy requirements that are required by certain industries and government standards.<\/p>\n\n\n\n<p>In short, encrypting data is a necessary means of protecting data in the digital age for reasons such as protecting personal privacy, preventing data leakage, guarding against hacker attacks, and meeting regulatory compliance requirements.<\/p>\n\n\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading1\">FDE on Debian 11<\/h2>\n\n\n\n<p>Enabling FDE on Debian 11 is straightforward. The installer program used in Debian 11 provides a \u201cGuided \u2013 use entire disk and set up encrypted LVM\u201d option when partitioning disks. It will encrypt everything with the exception of a small boot partition.<\/p>\n\n\n\n<p>If you already have a running instance of Debian 11 and want to enable full disk encryption, you need to reinstall it. Once installed, it cannot be fully encrypted. Encryption can only be performed on directories or partitions after installation.<\/p>\n\n\n\n<p>If you forget your encryption password, all of your data will be inaccessible. Therefore, it is recommended to choose a passphrase that you can easily remember or a strong password that\u2019s stored in a password vault or manager.<\/p>\n\n\n\n<p>Make sure to back up any critical data that may be lost during the reinstallation process before you get started.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/KJd6XQ0Njzo?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading2\">Enabling Full Disk Encryption on Debian 11<\/h2>\n\n\n\n<p>Select \u201cGraphical Install\u201d, then press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"382\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/1-3.png\" alt=\"tutorial screenshot\" class=\"wp-image-104610\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/1-3.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/1-3-300x224.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Select the language that suits you, then click &#8220;continue&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"383\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/2-2.png\" alt=\"tutorial screenshot\" class=\"wp-image-104611\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/2-2.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/2-2-300x224.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Select \u201cGuided \u2013 use entire disk and set up encrypted LVM\u201d option during partition disks and click \u201ccontinue\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"379\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/3-1.png\" alt=\"tutorial screenshot\" class=\"wp-image-104612\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/3-1.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/3-1-300x222.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Write the changes to disk, then click \u201ccontinue\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"381\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\" alt=\"tutorial screenshot\" class=\"wp-image-104613\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4-300x223.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Set a password for full disk encryption. Use a strong passphrase to protect the security of the disks, then click &#8220;continue&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"386\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/5.png\" alt=\"tutorial screenshot\" class=\"wp-image-104614\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/5.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/5-300x226.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>When you see this page, it indicates that Debian 11 has been successfully installed. Click &#8220;continue&#8221; to complete the installation.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"386\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/6.png\" alt=\"tutorial screenshot\" class=\"wp-image-104615\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/6.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/6-300x226.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>After starting Debian 11 and seeing this page, select \u201cDebian GNU\/Linux\u201d and then press Enter.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"356\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/7.png\" alt=\"tutorial screenshot\" class=\"wp-image-104616\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/7.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/7-300x209.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>You can see that we are required to enter the disk encryption password, which indicates that FDE has successfully been enabled on Debian 11.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"103\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/8.png\" alt=\"tutorial screenshot\" class=\"wp-image-104617\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/8.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/8-300x60.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>This concludes the process of enabling FDE on Debian 11.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading3\">Password Recovery Tips&nbsp;<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Emergency recovery disk<\/h3>\n\n\n\n<p>Creating an emergency password recovery disk during the installation of Debian 11 can be a vital step for accessing your system if you forget your encryption password. Here&#8217;s a detailed layout of how to set this up:<\/p>\n\n\n\n<ol>\n<li>During Installation: When Choosing the option to encrypt your disk, the installer should prompt you to create a recovery disk.<\/li>\n\n\n\n<li>Using a USB Drive: Insert a USB drive that will be used as your recovery disk. Make sure it&#8217;s formatted and empty as it will be used to store sensitive recovery information.<\/li>\n\n\n\n<li>Writing Recovery Data: Follow the prompts to write the necessary recovery data onto the USB drive. This typically includes the encryption key and other relevant data needed to unlock your encrypted disk.<\/li>\n\n\n\n<li>Finalizing and Testing: Once the recovery data is written, finalize the setup. It&#8217;s crucial to test the recovery disk to ensure it works properly by attempting to access your encrypted disk using the recovery disk.<\/li>\n\n\n\n<li>Storing the Disk: Keep the recovery disk in a secure but accessible location. It should be stored separately from your device to avoid simultaneous loss or theft.<\/li>\n\n\n\n<li>Regular Updates: If you ever change your encryption keys or update your system significantly, remember to update the recovery disk with the new data.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Use Password Management Software<\/h3>\n\n\n\n<p>There are many well-reviewed and trusted password managers. Make sure to select ones that have features like end-to-end encryption, zero-knowledge architecture, and multi-factor authentication. The process should include installing the software and creating a master password, which is the only one you&#8217;ll need to remember. Then, you can enter your disk encryption passphrase into the password manager. So, whenever you need to retrieve your passphrase, you can access it securely through the password manager using your master password.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Recovery Options in Bootloader<\/h3>\n\n\n\n<p>There is a method where you can perform a recovery procedure by configuring bootloader options. It is a good idea because it provides a secure and controlled method to regain access to your system if you forget your main password. This method is built into the system&#8217;s boot process and it also offers a customizable layer of security, allowing you to set fallback passwords or other authentication methods that only take effect during recovery scenarios. These features help ensure that you can always access your system without compromising its security, even in emergencies, so you can minimize the risk of losing data in your system.<\/p>\n\n\n\n<p>Here is how you can configure your bootloader for Debian 11, focusing on adding a fallback password or recovery mode that requires additional authentication:<\/p>\n\n\n\n<p>We can generate the fallback password by running the following command:\u00a0<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo grub-mkpasswd-pbkdf2<\/p>\n<\/div><\/div>\n\n\n\n<p>This command will prompt you to enter a password and will then output a hashed version of this password that you need to save.&nbsp;<\/p>\n\n\n\n<p>Then, we need to access the GRUB configuration by running the command in our terminal:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo nano \/etc\/default\/grub<\/p>\n<\/div><\/div>\n\n\n\n<p>This command opens the GRUB configuration file in a text editor.<\/p>\n\n\n\n<p>Next, we want to enable the Recovery Mode:<\/p>\n\n\n\n<p>Find the following line in the file:\u00a0<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>#GRUB_DISABLE_RECOVERY=&#8221;true&#8221;\u00a0<\/p>\n<\/div><\/div>\n\n\n\n<p>and change it to:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>GRUB_DISABLE_RECOVERY=&#8221;false&#8221;<\/p>\n<\/div><\/div>\n\n\n\n<p>This option enables the recovery mode option during boot.<\/p>\n\n\n\n<p>Now, add the following lines to the end of the GRUB configuration file to set up a superuser and a password:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>set superusers=&#8221;username&#8221;<br>password_pbkdf2 username grub.pbkdf2.sha512.10000.[rest of the hashed password here]<\/p>\n<\/div><\/div>\n\n\n\n<p>Replace &#8220;username&#8221; with your desired username and replace [rest of the hashed password here] with the output from the &#8216;grub-mkpasswd-pbkdf2&#8217; command.<\/p>\n\n\n\n<p>After the editing, save the file and close it.<\/p>\n\n\n\n<p>The next step is to update the GRUB configuration by running the following command:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo update-grub<\/p>\n<\/div><\/div>\n\n\n\n<p>This will update the configuration and you can proceed to reboot your system to test if the recovery options work correctly. During boot, try accessing the recovery options using the fallback password to ensure it prompts and works as expected.<\/p>\n\n\n\n<p>It is a good idea to document your configuration changes and consider securing the GRUB configuration file by setting appropriate file permissions:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo chmod 600 \/etc\/default\/grub<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo chown root:root \/etc\/default\/grub<\/p>\n<\/div><\/div>\n\n\n\n<p>This setup provides a secure method to recover access to your system, especially useful if the primary authentication method fails.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading4\">Conclusion<\/h2>\n\n\n\n<p>FDE provides a robust way to safeguard your data in case your device is lost or stolen. However, encryption is just one approach to ensuring the privacy and safety of your data. You\u2019ll also want to consider other security measures such as identity and access management (IAM), patch management, and Zero Trust controls such as multi-factor authentication (MFA).<\/p>\n\n\n\n<p>You can implement all of these measures and more via 探花大神\u2019s open directory platform, and ensure FDE is enabled across your device fleet, regardless of whether those devices are running Windows, macOS, or Linux.<\/p>\n\n\n\n<p><strong>Learn more about <\/strong><a href=\"https:\/\/jumpcloud.com\/support\/configure-data-encryption-for-linux-devices\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>how to configure data encryption for Linux systems<\/strong><\/a><strong> using the 探花大神 platform, and <\/strong><a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>sign up for free today<\/strong><\/a><strong> to get started.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.<\/p>\n","protected":false},"author":150,"featured_media":104613,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2781],"tags":[],"collection":[2778],"platform":[],"funnel_stage":[3017],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Enable Full Disk Encryption on Debian 11 - 探花大神<\/title>\n<meta name=\"description\" content=\"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Enable Full Disk Encryption on Debian 11\" \/>\n<meta property=\"og:description\" content=\"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\" \/>\n<meta property=\"og:site_name\" content=\"探花大神\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-01T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-18T15:55:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"381\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"How to Enable Full Disk Encryption on Debian 11\",\"datePublished\":\"2023-12-01T16:00:00+00:00\",\"dateModified\":\"2024-07-18T15:55:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\"},\"wordCount\":1313,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\",\"articleSection\":[\"How-To\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\",\"url\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\",\"name\":\"How to Enable Full Disk Encryption on Debian 11 - 探花大神\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\",\"datePublished\":\"2023-12-01T16:00:00+00:00\",\"dateModified\":\"2024-07-18T15:55:27+00:00\",\"description\":\"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png\",\"width\":512,\"height\":381,\"caption\":\"tutorial screenshot\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Enable Full Disk Encryption on Debian 11\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"探花大神\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"探花大神\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"探花大神\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the 探花大神 Champion for Product, Security. 探花大神 and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Enable Full Disk Encryption on Debian 11 - 探花大神","description":"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11","og_locale":"en_US","og_type":"article","og_title":"How to Enable Full Disk Encryption on Debian 11","og_description":"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.","og_url":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11","og_site_name":"探花大神","article_published_time":"2023-12-01T16:00:00+00:00","article_modified_time":"2024-07-18T15:55:27+00:00","og_image":[{"width":512,"height":381,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png","type":"image\/png"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"How to Enable Full Disk Encryption on Debian 11","datePublished":"2023-12-01T16:00:00+00:00","dateModified":"2024-07-18T15:55:27+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11"},"wordCount":1313,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png","articleSection":["How-To"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11","url":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11","name":"How to Enable Full Disk Encryption on Debian 11 - 探花大神","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png","datePublished":"2023-12-01T16:00:00+00:00","dateModified":"2024-07-18T15:55:27+00:00","description":"Safeguard your data and learn how to enable full disk encryption (FDE) on Debian 11 in this tutorial.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/12\/4.png","width":512,"height":381,"caption":"tutorial screenshot"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-debian-11#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"How to Enable Full Disk Encryption on Debian 11"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"探花大神","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"探花大神","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"探花大神"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the 探花大神 Champion for Product, Security. 探花大神 and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/104600"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=104600"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/104600\/revisions"}],"predecessor-version":[{"id":113093,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/104600\/revisions\/113093"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/104613"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=104600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=104600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=104600"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=104600"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=104600"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=104600"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=104600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}