# Switch to an encrypted home partition

<note warning>Backup everything on your home partition first !</note>
As root:

    umount /home
    blkid
        # Get the /dev/sdXY associated to your /home, in my case /dev/sda6
    # Make some noise, erase everything on /home
    badblocks -c 10240 -s -w -t random -v /dev/sda6
    # Encrypt the partition
    cryptsetup -c aes-xts-plain -y -s 512 luksFormat /dev/sda6
        # Enter a Master key
    cryptsetup luksAddKey /dev/sda6
        # Enter your user's password
    # Unlock the partition
    cryptsetup luksOpen /dev/sda6 home
        # Enter a key, doesn't matter which one
    # Re-create the filesystem
    mkfs.ext4 /dev/mapper/home
    
    aptitude install libpam-mount
    
    Edit the file /etc/security/pam_mount.conf.xml, add before the closing tag:
    
    <volume fstype="crypt" path="/dev/sda6" mountpoint="/home" />
    
    Edit the file /etc/fstab, comment the line for /home