Tomb

Tomb is a minimalistic command-line tool for creating and managing encrypted folders on Linux, built on dm-crypt and LUKS. Each encrypted volume is a tomb folder paired with a separate key file, so the storage and the key that unlocks it can be kept and moved independently.

The workflow is a handful of short commands: dig a new tomb of a chosen size, forge a key, then lock the tomb with that key. Later you open the tomb to mount it and close it when done; if you are in a hurry, slam kills every process holding files open inside the tomb and closes it immediately.

Two-factor unlocking with a FIDO2 passkey adds a hardware second factor for opening your volumes.