Choosing a Key
Use a strong password, if you're planning to use an entered one.
dd
can provide a suitable keyfile if you'd prefer a higher level of security:
dd if=/dev/urandom of=keyfile bs=1 count=4096
for a 4kb random keyfile
If you lose your file's key/keyfile, there is no recovering the encrypted data. This is not unique to Dexios - it's the nature of encryption as a whole.
Options for providing a key
You may provide keys in a few ways:
-k
for giving path to a keyfile--auto
to tell Dexios to auto-generate a key- The
DEXIOS_KEY
environment variable - A user-provided password (this can be chosen by just running Dexios, and providing none of the above)