You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Milan Broz 4100fd2817 Update for 2.2.0. 5 days ago
docs Prepare version 2.2.0. 5 days ago
lib Fix minimal size check for device in LUKS2 reencryption. 6 days ago
man Make resize action accept --device-size parameter (supports units). 1 month ago
misc Update copyright year. 6 months ago
po Add ja.po translation. 5 days ago
scripts Do not rename tmpfile config but use it directly. 1 year ago
src Fix volume key file if no LUKS2 keyslots are present. 6 days ago
tests Fix volume key file if no LUKS2 keyslots are present. 6 days ago
.gitignore Update git ignore file. 7 months ago Add kernel crypt backend option to Travis build. 7 months ago
.travis.yml Switch to Xenial distro in Travis. 2 months ago
AUTHORS Update author name. 5 years ago
COPYING Fix FSF address in license text according to 7 years ago
COPYING.LGPL Change License for sub-libraries from GPLv2 only to LGPLv2.1+ ("or any later") 6 years ago
ChangeLog Update version control history url 3 years ago
FAQ Fix misspellings 6 months ago
INSTALL Fix typos. 1 year ago Do not run empty test set in main directory. 9 months ago
NEWS Specify copyright holders in source files. 8 years ago
README Move README back. 3 years ago Update for 2.2.0. 5 days ago
TODO Update copyright year. 1 year ago Do not run configure automatically after running 1 year ago Prepare version 2.2.0. 5 days ago

LUKS logo

What the …?

Cryptsetup is a utility used to conveniently set up disk encryption based on the DMCrypt kernel module.

These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt (including VeraCrypt extension) formats.

The project also includes a veritysetup utility used to conveniently setup DMVerity block integrity checking kernel module and, since version 2.0, integritysetup to setup DMIntegrity block integrity kernel module.

LUKS Design

LUKS is the standard for Linux hard disk encryption. By providing a standard on-disk-format, it does not
only facilitate compatibility among distributions, but also provides secure management of multiple user passwords.
LUKS stores all necessary setup information in the partition header, enabling to transport or migrate data seamlessly.

Last version of the LUKS2 format specification is available here.

Last version of the LUKS1 format specification is available here.


  • compatibility via standardization,
  • secure against low entropy attacks,
  • support for multiple keys,
  • effective passphrase revocation,
  • free.

Project home page.

Frequently asked questions (FAQ)


All release tarballs and release notes are hosted on

The latest cryptsetup version is 2.2.0

Previous versions

Source and API docs

For development version code, please refer to source page, mirror on or GitHub.

For libcryptsetup documentation see libcryptsetup API page.

The libcryptsetup API/ABI changes are tracked in compatibility report.

NLS PO files are maintained by TranslationProject.


Please always read FAQ first. For cryptsetup and LUKS related questions, please use the dm-crypt mailing list,

If you want to subscribe just send an empty mail to

You can also browse list archive or read it through web interface.