This community guide collects recommendations for improving security and privacy on macOS.
Open source
24 alternativesYubikey Full Disk Encryption
github.com/agherzan/yubikey-full-disk-encryption
Desktop & OS Privacy
Open-source projectOpen source
Use a YubiKey challenge-response at system startup to open a LUKS-encrypted disk volume.
About Yubikey Full Disk Encryption
Yubikey Full Disk Encryption is an open source Linux tool that uses YubiKey HMAC-SHA1 challenge-response to generate passphrases for unlocking LUKS-encrypted disk volumes. It can be used during the initramfs stage of the boot process as well as on running systems. The project is only tested and intended for Arch Linux and its derivatives, and requires a YubiKey version 4 or later to function.
Key features
- Unlocks LUKS-encrypted volumes using YubiKey HMAC-SHA1 challenge-response
- Supports automatic 1FA mode with stored challenge for seamless unlocking
- Supports manual 2FA mode with secret challenge for stronger security
- Operates during initramfs boot stage and on running Linux systems
- Enrolls passphrases for new or existing LUKS encrypted volumes
- Includes experimental NFC support and suspend service options
Best for: Linux users, particularly those on Arch Linux and its derivatives with YubiKey version 4 or later, seeking hardware-based passphrase generation for LUKS-encrypted disk volumes.
Good for
- Generates strong, brute-force resistant LUKS passphrases via YubiKey HMAC-SHA1
- Offers both single-factor (1FA) and two-factor (2FA) authentication modes
- Open source with multiple installation methods including Arch repo, makepkg and make
Watch out for
- Only tested and intended for Arch Linux and its derivatives
- Requires YubiKey version 4 or later
- Does not protect against physical tampering like evil maid attacks or post-unlock malware
Yubikey Full Disk Encryption at a glance
- Category
- Privacy & Security › Desktop & OS Privacy
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Yubikey Full Disk Encryption alternatives
Tools and sites you could use instead, ranked by how closely they match.
Cryptsetup and LUKS provide open-source disk encryption, including full-disk encryption.
Tomb makes strong encryption easier for everyday use by creating locked folders that can be transported and hidden in a filesystem.
Free
24 alternatives
Process macOS and iOS disk images or live machines with mac_apt to extract forensic data and metadata.
Open source
24 alternatives
Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.
Open source
24 alternatives
Add face-based authentication to Linux using Howdy, which works with built-in infrared emitters and cameras.
Open source
24 alternativesPopular in Desktop & OS Privacy
Well-known listings from the same topic.
wBlockapps.apple.com/app/wblock/id6746388723uBO Lite Safariapps.apple.com/app/ublock-origin-lite/id674534…Stayapps.apple.com/app/stay-for-safari/id1591620171Lockdown Privacylockdownprivacy.comTor Browsertorproject.orgFirejailfirejail.wordpress.com
Yubikey Full Disk Encryption FAQ
What Linux distributions is this tool designed for?
It is only tested and intended for Arch Linux and its derivatives.
What YubiKey versions are compatible with this tool?
It requires a YubiKey version 4 or later.
Does this tool protect against evil maid attacks or malware after system unlock?
No, it does not protect against physical tampering like evil maid attacks or malware running after the system is unlocked.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.