VeraCrypt is free open-source disk encryption software for Windows, Mac OS X and Linux. In case an attacker forces you to reveal the password, VeraCrypt provides plausible deniability. In contrast to file encryption, data encryption performed by VeraCrypt is real-time (on-the-fly), automatic, transparent, needs very little memory, and does not involve temporary unencrypted files.
I’d like to use BSD more, but what about encrypted backup disks ? I just found out that Veracrypt works on FreeBSD https://www.freshports.org/security/veracrypt/ For OpenBSD someone was working on a port but this seems to have gone stale. Veracrypt is based on the “notorious” Truecrypt. At first iirc Veracrypt was hosted on a Microsoft focused coding platform, now they seem to host it themselves. What do you think about VC ? Of course I could buy a new usb disk for my BSD installs and use native encryption that. But with Veracrypt I could use the disks on Linux and BSD. Then there is also EncFS which is apparently supported by OpenBSD and FreeBSD but I’ve read it doesn’t have a good name. https://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software#Operating_systems Then there is the idea of using ZFS encryption. Looking forward to your thoughts and ideas.