Skip to content
atominfra docs

Encrypting your home

You can keep private files in an encrypted directory inside a Box, with a passphrase only you know.

Terminal window
af box encrypt-home agent1

This prints the steps to run inside the Box. It runs nothing itself.

  • The passphrase is yours. You type it into the Box. af never asks for it, sees it or stores it, and neither does your admin.
  • It protects data at rest, such as a stopped Box, its disk and its snapshots, not a running Box you have unlocked.
  • A lost passphrase cannot be recovered. Nobody can open the directory without it. Write it down somewhere safe.