# Using a secure account

Accounts containing trust secrets need special care.


## Storage


### Full disk encryption



### encrypted partition

You need package `cryptsetup-bin`.
Install it if not done already.

Physically connect the disk (if removable)
and mount first encrypted disk and then its partition inside:

	sudo cryptdisks_start mysecrets
	sudo mount /mnt/mysecrets

When done working with encrypted data,
unmount first partition and then disk:

	sudo umount /mnt/mysecrets
	sudo cryptdisks_stop mysecrets


## Secrets


### PGP


### Keysigning



[caff]: https://wiki.debian.org/caff
  "CA - Fire and Forget"


### SSH


## Monkeysphere