Q: Is it possible to encrypt whole /home/ ? A: Yes, but it is quite complicated and *not* recommended process - you need to be sure, that You'll know what to do, if something goes wrong. And I would not like to be in your shoes, if you find yourself in need for reflash COMBINED (although, it doesn't affect reflashing kernel-only). See THIS and find template scripts HERE