Guides/On this machine
Encrypt files on Linux without root or LUKS
You don't need root or LUKS to encrypt a folder on Linux. Elba runs in Chromium or Chrome as a normal user and seals a folder with AES-256-GCM — no admin, no full-disk migration.
When per-folder beats full-disk
Full-disk encryption protects a machine at rest but exposes everything the moment you log in. A per-folder Elba vault stays sealed even while you're using the computer.
What you need
A Chromium-family browser (Chromium, Chrome, Brave, Edge, Vivaldi). Firefox is usable for many features but Elba targets Chromium's File System Access API.
Questions people actually ask
- Does this replace LUKS?
- No — LUKS protects the whole disk offline. Elba complements it for folders that must also be sealed while the machine is running.
- Works on Wayland?
- Yes — Elba is a browser tab; it uses whatever your browser uses.
Take the island
Elba is one HTML file. It runs locally in a Chromium browser, seals a folder with AES-256-GCM, never phones home, and becomes open source on 1 January 2030.
- €49MMXXVI· now ·
- €39MMXXVII2027
- €29MMXXVIII2028
- €19MMXXIX2029
- FreeMMXXX2030
the price falls each year · free to all 1 jan 2030
pay once · no account · nothing leavesRelated guides
- Elba vs LUKS — full-disk vs per-folder encryption on Linux
LUKS encrypts the whole disk offline. Elba encrypts a single folder while the machine runs. They solve different problems on Linux.
- How to encrypt a folder with a password (properly)
The right way to encrypt a folder with a password: local, strong algorithm, and no recovery link. Elba does exactly that.