Full disk encryption

Also known as FDE for short.

If your device has a  in the FDE column of the all devices table, you can enable full disk encryption with the   parameter.

Needs to be ported to devices individually following this https://wiki.postmarketos.org/wiki/Osk-sdl#Porting_to_New_Devices

Changing Luks Password
To change your luks password, connect your phone's storage medium to a Linux computer with installed.

Run the following command:

I can get the target device by running the  command. For example, if my storage medium's partition table looked like:

To change my password, I would run:

Mounting Additional Encrypted Drives At Boot
As per the following from Alpine and pmOS: https://wiki.alpinelinux.org/wiki/LVM_on_LUKS#Mounting_additional_encrypted_filesystems_at_boot and https://wiki.postmarketos.org/wiki/Fstab

This process will need a Key File that has the password to the encrypted drive.

Generating and/or saving the Key File to be accessible for dmcrypt
Known password to the LUKS drive, below it is listed in  but the saving directory can be anywhere but needs to be only accessible to root, same with the storing folder for the key:

Randomly generated password (from Alpine):

Mounting the encrypted drive
Alpine and pmOS, like Gentoo, uses the  service rather than.

Install and enable the following:

Add the following lines to :

Now fstab needs to be enabled and the drive added to the list:

Edit  with the information from dmcrypt:

Reboot!

Blank screen
Touchscreen works but you can't see what you are typing. Use a keyboard and an OTG cable to enter the password and unlock it. You can also see the phone is still alive by switching with +  +  ~. FDE prompt is usually on second console(F2).

Install  to solve the issue: