Linux crypto that grandma can use.

Simple situation: You are the family computer nerd. You have been keeping all of the family photos and videos from everyone smartphones backed up on a external USB drive. You have been doing so for 10 years, meanwhile the family has been throwing out and replacing their smartphones every year, while jumping ship from old social networking website to new social networking website, letting their data on those sites die when the site goes out of business. Suddenly you die. You family is devastated but so thankful you had been diligent keeper of family memories for so long. They plug your drive into the dads window laptop but can't see anything because you used LVM encryption, they plug it into your laptop but can't figure out how to get around your tiling window manager, much less your encryption. Does a simple file crypto tool exist for linux? Is there anything that it just like a folder you can click to open, but it's encrypted and you instead get a little GTK pop up that you can type your password into to decrypt it? Old people I know type passwords into boxes a lot. So they could manage that. Does anything exist like that? The most simple tool I know of is Tomb, and that requires knowing how to use a terminal and memorize its commands. Is there something more easy than Tomb?

Most popular GUI file managers do this by default. I think most of them use udiskie to automount USB drives and decrypt drives.

Why is it encrypted in the first place? It shouldn't be. No one cares about those pictures and videos except you and your family. If it's for "opsec" or whatever larping, it's useless because if they have access to the drive in the first place, they have access to everything. Just remove the encryption.

>>12864 Talking about myself, I started throwing everything in a Tomb file after there was a break in at my moms, and some of the things they stole were drives that had videos of intimate family moments on them. (Birth days, Christmas mornings, etc). Family members said they felt violated that all of that was just out there being looked at by some crackhead. Thankfully, I had backups. >>12863 Really? I've been using thunar for like 10 years and it's never done that to any of my Tomb files. Does Caja do it? What kind of encrypted files does it work with, if not Tomb files? I've never heard of this before.

>>12861 You could make a script that says "run this if I die", and make it so it should prompt for a password only they know.

>12865 I've never interacted with tomb files before. I couldn't comment on them. I use udiskie for mounting luks encrypted partitions. I took a glace at the man page and it doesn't make mention of anything besides auto mounting USB devices.

I think some Gnomeware had had a working GUI GPG wrapper that only asked for password to encrypt folders, probably as addon for Thunar or something like that.

>>12869 I've never heard of that. Did it have a name?

It's pretty easy to encrypt and decrypt files with 7zip. Works across pc and phone. AES-256.

>>12861 Give them the public Google URL to it and they can access it through their browser without the hard drive, even for the stuff they never uploaded from their phones. No I'm not joking. (otherwise write a script with prompt) https://www.youtube.com/watch?v=hLjht9uJWgw

>>12870 I don't but Dejadup works similarly, only for crappy GPG GUI wrapper for "backups". You specify a destination on an external drive and password, it writes folders in equal encrypted file chunks. Thus, for accessing your encrypted files and restoring them, a family will need the drive, the password, and original OS where Dejadup is installed.

I thought of a better idea. On an unencrypted flash drive, compress your photos into an password protected zipfile. Upload it to a cloud provider (or your vps) for redundancy. With a strong password, you don't need some elaborate setup to keep the low lifes from viewing your data. In my opinion, this is the simplest way to keep your data safe and your family in reach of it.

>>12892 >With a strong password, you don't need some elaborate setup to keep the low lifes from viewing your data. Whatever encryption you use will probably become crackable within your lifetime and you can't truly delete anything from The Cloud^W^W Other People's Computers.

>>12894 Fortunately lain is only storing family photos and not highly classified government documents. A zipfile will be fine. Let's pray to God these crackheads don't discover a 0 day to bypass it's encryption.

>>12894 Yes, but we can create and upload so much soykaf to the internet that any adversary not specifically targeting you will probably never extract it. I'm naively confident we're creating soykaf much faster than the NSA will ever be able to mass process it, especially anything non-text. Any one got know info?

>>12897 They dont analyze everything I don't think, they just keep it stored forever and then dig into it when looking into a target.

OP, you have several options. 1) Leave instructions to use some live distro image/disc (and instructions on how to do that) which uses udisksctl, then they can literally just doubleclick on the drive name in the file viewer and get a password prompt. 2) Statically-linked binaries (for Windows & Linux) that will search the system for LUKS drives and prompt password for each, then open them in the file manager. 2.5) A powershell script that installs a Linux distro, prompts for drive password and opens up a file viewer is also an option.