eCryptfs
eCryptfs is a POSIX-compliant enterprise cryptographic filesystem for Linux that provides per-file encryption at the kernel level. It operates as a stacked filesystem, encrypting files transparently as they are written to disk and decrypting them on read, without requiring changes to underlying storage or applications. It is commonly used for securing sensitive data like home directories, email, or confidential documents on Linux systems.
Developers should learn eCryptfs when building or maintaining Linux-based systems that require transparent file-level encryption for data-at-rest protection, such as in secure server environments, compliance-driven applications (e.g., healthcare or finance), or personal privacy tools. It is particularly useful because it integrates seamlessly with Linux without reformatting disks, supports key management via passphrases or public-key cryptography, and allows selective encryption of directories.