# Encrypt empty directory 

Source: [https://docs.qualcomm.com/doc/80-88500-2/topic/59_Encrypt_empty_directory_.html](https://docs.qualcomm.com/doc/80-88500-2/topic/59_Encrypt_empty_directory_.html)

To encrypt an empty directory, perform the following steps:
      
1. Run the following command:

        fscrypt encrypt dirCopy to clipboard
2. Follow the prompts to create or choose a protector. Protector protects the encryption key of the directory. The protector types are as follows:
    - `custom_passphrase`: It is a user-defined passphrase.
    - `pam_passphrase`: It is the log on passphrase for a particular user. When the user logs on, `pam_fscrypt` (if enabled) automatically unlocks the directories using this protector.

Note: Go to [https://github.com/google/fscrypt](https://github.com/google/fscrypt) and follow the security recommendations before using these types of protectors. The passphrase can be changed later or the directory can be reprotected with another method.

For example:

    fscrypt encrypt private/Copy to clipboard

    Should we create a new protector? [y/n] y
    Your data can be protected with one of the following sources:
    1 - Your login passphrase (pam_passphrase)
    2 - A custom passphrase (custom_passphrase)
    3 - A raw 256-bit key (raw_key)
    Enter the source number for the new protector [2 - custom_passphrase]: 2
    Enter a name for the new protector: Super Secret
    Enter custom passphrase for protector "Super Secret":
    Confirm passphrase:
    "private/" is now encrypted, unlocked, and ready for use.Copy to clipboard

**Parent Topic:** [File-based encryption (Linux Ubuntu)](https://docs.qualcomm.com/doc/80-88500-2/topic/56_File_based_encryption.html)

Last Published: Aug 18, 2023

[Previous Topic
Enable the fscrypt userspace tool](https://docs.qualcomm.com/bundle/publicresource/80-88500-2/topics/58_Enable_the_fscrypt_userspace_tool.md) [Next Topic
File-based encryption (Linux Embedded)](https://docs.qualcomm.com/bundle/publicresource/80-88500-2/topics/file_based_encryption_linux_enabled.md)