Windows
Linux
Security & Permissions
Disk & Storage
Windows manage-bde equivalent in Linux
Creates, opens and closes LUKS-encrypted Linux block devices.
Windows
→
manage-bde
Linux equivalents
sudo cryptsetup luksOpen /dev/sdb1 secure
sudo cryptsetup luksOpen /dev/sdb1 secure
sudo cryptsetup luksOpen /dev/sdb1 secure
Overview
What this command does
Creates, opens and closes LUKS-encrypted Linux block devices.
Migration tip: LUKS with
cryptsetup is the standard Linux full-volume encryption workflow and is conceptually similar to BitLocker.Practical tasks
Common use cases
Manage encrypted volumes
Creates, opens and closes LUKS-encrypted Linux block devices.
sudo cryptsetup luksFormat /dev/sdb1
Initialize a LUKS volume
sudo cryptsetup luksOpen /dev/sdb1 secure
Unlock as /dev/mapper/secure
sudo cryptsetup luksClose secure
Lock the mapped volume
Ready to run
Copyable Linux commands
Review paths, device names, package names and permissions before running any command.
sudo cryptsetup luksFormat /dev/sdb1
sudo cryptsetup luksOpen /dev/sdb1 secure
sudo cryptsetup luksClose secure
Walkthrough
Examples with explanations
sudo cryptsetup luksFormat /dev/sdb1 # create an encrypted volume
sudo cryptsetup luksOpen /dev/sdb1 secure # unlock the volume
sudo cryptsetup luksClose secure # close the unlocked mappingReference
Common options and variations
| Command or option | Use |
|---|---|
sudo cryptsetup luksFormat /dev/sdb1 | Initialize a LUKS volume |
sudo cryptsetup luksOpen /dev/sdb1 secure | Unlock as /dev/mapper/secure |
sudo cryptsetup luksClose secure | Lock the mapped volume |
Distro differences
Debian/Ubuntu vs Fedora vs Arch
This command is the same on Debian/Ubuntu, Fedora and Arch Linux when the relevant tool is installed.
| Distribution | Package manager / base | Equivalent command | Difference to notice |
|---|---|---|---|
| Debian/Ubuntu | same command | sudo cryptsetup luksOpen /dev/sdb1 secure |
Same command on this distribution. |
| Fedora | same command | sudo cryptsetup luksOpen /dev/sdb1 secure |
Same command on this distribution. |
| Arch | same command | sudo cryptsetup luksOpen /dev/sdb1 secure |
Same command on this distribution. |
Important
What to watch out for
luksFormat permanently overwrites encryption metadata on the selected partition. Double-check the device path and securely store the recovery passphrase.
Keep learning