I know I could and should encrypt whole drives but I want another layer of protect specific folders when my devices are unlocked, a password. I want the folders to behave like regular folders where I can add or remove files as usual, without a clunky UX like password protected zips. I looked it up and didn’t find any straightforward solutions.
Password protected zips are very easy to brute force so I wouldn’t use them for anything
deleted by creator
Maybe create a separate partition and encrypt it so it asks for a password on mount, then unmount it when not in use?
Cross platform you’re sol, I’m afraid. If there’s an option I’d like to know, too.
Usually I cover my requirements with acl in this case.
I understood op is talking about devices like an external hard drive, in which case any Linux only solution (based on fuse) won’t work for windows and similarly the easy nfs encryption option on folders wont work with Linux.
🤷
It can work on an application layer
this is your solution ☞ https://veracrypt.fr/en/Home.html or https://veracrypt.fr/
You can store files in a keepassXC database.
You can use 7zip to archive files into a .7z and protect it with a password. 7zip is cross-platform, it’s available for Windows, Mac and Linux.
Edit: sorry, I see you have already evaluated this option. I don’t know another method that would me more transparent.
That is massively insecure
