Header-Backup (EN)

Header-Backup

A header backup is a backup copy of the LUKS header that is essential for data recovery in case of header damage. The LUKS header contains important metadata about the encryption, without which the data can no longer be decrypted. You should regularly store the header in a secure location that is separate from the encrypted data. In case of damage, the secured header can be restored to enable access to the encrypted data.

Architecture

flowchart TD     A[LUKS-Volume] -->|Contains| B[LUKS-Header]     B -->|Contains| C[Encryption metadata]     B -->|Contains| D[Key material]     E[Header-Backup] -->|Backs up| B     F[Data storage] -->|Contains| A     G[Secure storage location] -->|Stores| E 

In Context

• Typically used together with LUKS volumes
• Related to: Full disk encryption, Data security, Disaster Recovery
• Example use case: Recovery after accidental header overwrite