# Using a secure account

Accounts containing trust secrets need special care.


## Storage


### Full disk encryption



### encrypted partition

You need package `cryptsetup-bin`.
Install it if not done already.

Connect the device (if removable)
and locate its device name (first column):

	lsblk --paths --nodeps

Mount the encrypted partition on the device:

	cryptdisks_start mysecrets


## Secrets


### PGP


### Keysigning



[caff]: https://wiki.debian.org/caff
  "CA - Fire and Forget"


### SSH


## Monkeysphere