- MacOS: FileVault2
- Linux (which I don't have): luks/ dm-crypt
- Windows: Bitlocker
- Hard drives: VeraCrypt (TrueCrypt back then)
Is this fine these days? Are there other, better (and user-friendly) options?
Protecting myself against three letters or anything is not the requirement here. I want my diary, notes, pictures, etc. safe from people (not institutions).
[1] Ask HN: How do you encrypt your laptops? (https://news.ycombinator.com/item?id=11761491)
[2] Ask HN: Do you encrypt your laptop's hard disk? (https://news.ycombinator.com/item?id=1683255)
To encrypt a Windows 10 system u can use Veracrypt to boot the whole OS or just a container.
For Windows (Enterprise) you can also use BitLocker by Microsoft although the source code isn't trusted and I believe you have have a more expensive license in order to use it.
Yes you should encrypt your laptop. It's worth it in case you lose a laptop or it gets stolen nobody can read the data.
It's an easy and unobtrusive way to get started with encrypting your files, and it's cross-platform to all the OSes VeraCrypt supports (macOS/Windows/Linux/etc).