Start here for LUKS:
https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup Remember, disk encryption that FM uses vs. file encryption you opt to place on tax documents addresses 2 different attack vectors. The former might guard against bad actors infiltrating FM's systems and snooping around for juicy data to snatch. The latter might help protect you if your specific FM account is hacked.