diff --git a/flake.nix b/flake.nix
index 2b96754..b55819e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -157,6 +157,7 @@
           ./modules/fh/forensik.nix
           ./systems/laptop/configuration.nix
           ./modules/cli-tools.nix
+          ./modules/ecryptfs.nix
           ./modules/virt-manager.nix
           ./modules/vmware-host.nix
           ./modules/nix/ld.nix
diff --git a/modules/cli-tools.nix b/modules/cli-tools.nix
index 8ce21ec..0b4aa1d 100644
--- a/modules/cli-tools.nix
+++ b/modules/cli-tools.nix
@@ -24,5 +24,6 @@
     tldr
     file
     unzip
+    lsof
   ];
 }
diff --git a/modules/ecryptfs.nix b/modules/ecryptfs.nix
new file mode 100644
index 0000000..55a1894
--- /dev/null
+++ b/modules/ecryptfs.nix
@@ -0,0 +1,10 @@
+{ pkgs, ...}:
+{
+  environment.systemPackages = with pkgs; [
+    ecryptfs
+  ];
+  security.pam.enableEcryptfs = true;
+
+  programs.ecryptfs.enable = true;
+  boot.kernelModules = ["ecryptfs"];
+}