Welcome screen

The landing view and the sidebar: create a vault, open one, or pick from recent vaults.

The Welcome view is what you see when you launch luksbox-gui without a file argument. On the left is the sidebar, which stays on every view: the vault buttons, the list of recent vaults and the FIDO2 authenticator picker. The main panel holds the two big actions and some setup advice.

Welcome view: sidebar on the left with + New vault, Open existing..., the RECENT list, Generate strong passphrase, PANIC: destroy a vault..., the FIDO2 AUTHENTICATOR picker with Re-detect, and About LUKSbox; main panel with + Create a new vault and Open existing vault... above a recommendation box and post-quantum guidance — The Welcome view. The sidebar stays on every view; the recommendation box adapts to whether a FIDO2 authenticator is plugged in.

The main panel

+ Create a new vault

Takes you to the Create form where you pick:

The vault file path
The keyslot factor and variant (passphrase, FIDO2, TPM 2.0, Secure Enclave, hybrid post-quantum)
The cipher (AES-256-GCM-SIV by default)
The Argon2id strength (Interactive / Moderate / Sensitive)

Open existing vault...

Pick a vault file with the system file chooser. Takes you to the Unlock view, which reads the vault's keyslots and preselects an unlock method that opens one of them.

Below the two buttons, the panel recommends a setup (FIDO2 + passphrase backup + detached header + anchor when an authenticator is plugged in, passphrase + detached header + anchor otherwise), followed by post-quantum guidance and operational tips.

Item	What it does
+ New vault	Same as + Create a new vault
Open existing...	Same as Open existing vault...
Type path manually...	Opens the Unlock view with an empty path field, for when the system file chooser does not work
RECENT	The recent-vaults list (below)
Generate strong passphrase	Passphrase generator (length, character sets, preview, copy)
PANIC: destroy a vault...	Panic mode
FIDO2 AUTHENTICATOR	The authenticator LUKSbox uses for every FIDO2 operation. (refresh) Re-detect scans again after you plug a key in or out.
About LUKSbox	Version, author, website, licence

The version number and the zoom level are shown at the bottom.

If a vault is open or mounted when you pick another action (a new vault, another vault, panic), LUKSbox first asks you to lock it (and unmount it).

Recent vaults list

The vaults you opened or created recently, newest first (up to 20). The list is kept in a file only your user can read:

Linux: ~/.local/share/luksbox/recent.json (under $XDG_DATA_HOME when set)
macOS: ~/Library/Application Support/luksbox/recent.json
Windows: %APPDATA%\luksbox\recent.json

Each entry shows the vault name and path, with a detached or anchor tag when the vault uses a detached header or an anchor. The kinds of keyslots are deliberately not shown: they appear in the Unlock view once you pick the vault. An entry whose file is no longer at that path is tagged missing.

Click an entry to go to the Unlock view with its path, detached header and anchor filled in.

Sidebar with the RECENT section highlighted: one entry showing the vault name, its path, and a small x on the right — A recent entry shows the name and path. The x forgets it; right-click it for Forget from history... and Delete vault...

Forget or delete a vault

Click the x of an entry, or right-click it and pick Forget from history...: the dialog Forget this vault from history? removes the entry from the list. The vault file stays where it is; open it again with Open existing... to bring it back. (This dialog also offers the delete button described next.)
Right-click an entry and pick Delete vault... (0.6.0+): the dialog Delete this vault? deletes the .lbx file from disk and forgets the entry. It lists the files in the same folder that look related (the .kyber seed file, a .hdr detached header, the .anchor, the .hybrid sidecar, the .header-bak / .meta-bak crash-recovery copies, other files with the same name), each with a checkbox: files LUKSbox recognises start ticked, the others unticked. Forget AND delete the .lbx file + ticked files (IRREVERSIBLE) deletes them; Only forget from history (keep the files) and Cancel back out. When the .lbx is already gone, the button deletes only the ticked leftovers.

LUKSbox does not offer to delete the vault that is open, mounted or busy in this window. The dialog says This vault is open in LUKSbox. Lock it (and unmount it, if mounted) before deleting its files., and only forgetting is possible until you do.

Deniable vaults are never listed

Deniable vaults are never added to the list: a LUKSbox file recording their path would tell anyone imaging the disk that a deniable vault exists there. Open them with Open existing... or Type path manually... each time.

An older GUI could record a deniable vault you created or opened. If you see one in the list, remove it (x, or right-click > Forget from history...).

Keyboard shortcuts

Key	Action
`Ctrl` + `+` (or `Ctrl` + `=`)	Zoom in
`Ctrl` + `-`	Zoom out
`Ctrl` + `0`	Reset the zoom
`Esc`	Close the open dialog

Use Cmd instead of Ctrl on macOS. LUKSBOX_GUI_ZOOM=1.5 (any value from 0.5 to 4.0) sets the zoom at startup. The Browser has its own keys (F2 to rename, Enter to open a folder): see Browsing files.