# How to Encrypt and Decrypt Files and Directories Using Tar and OpenSSL
When you have important sensitive data, then its crucial to have an extra layer of security to your files and directories, specially when you need to transmit the data with others over a network.
That’s the reason, I am looking for a utility to encrypt and decrypt certain files and directories in Linux, luckily I found a solution thattarwithOpenSSLcan do the trick, yes with the help of these two tools you can easily create and encrypt tar archive file without any hassle.
In this article, we will see how to create and encrypt atarorgz(gzip) archive file withOpenSSL:
Remember that the conventional form of usingOpenSSLis:
```
# openssl command command-options arguments
```
#### Encrypt Files in Linux
To encrypt the contents of the current working directory (depending on the size of the files, this may take a while):
2.`-e`– a enc command option to encrypt the input file, which in this case is the output of the tar command
3.`-aes256`– the encryption cipher
4.`-out`– enc option used to specify the name of the out filename, secured.tar.gz
#### Decrypt Files in Linux
To decrypt a tar archive contents, use the following command.
```
# openssl enc -d -aes256 -in secured.tar.gz | tar xz -C test
```
Explanation of the above command:
1.`-d`– used to decrypt the files
2.`-C`– extract in subdirectory namedtest
The following image shows the encryption process and what happens when you try to:
1. extract the contents of the tarball the traditional way
2. use the wrong password, and
3. when you enter the right password
[][1]
Encrypt or Decrypt Tar Archive File in Linux
When you are working on a local network or the Internet, you can always secure your vital documents or files that you share with others by encrypting them, this can help reduce the risk of exposing them to malicious attackers.
We looked at a simple technique of encrypting tarballs using OpenSSL, a openssl command line tool. You can refer to its man page for more information and useful commands.
As usual, for any additional thoughts or simple tips that you wish to share with us, use the feedback form below and in the upcoming tip, we shall look at a way of translatingrwx permissionsinto octal form.
