I have a laptop, with Fedora 20 installed. I need to change the passphrase/password that it asks for at every boot. The encryption is LUKS. Two devices are encrypted, the hard drive itself, and the / (root) partition.
How would I change the password/passphrase on both devices?
Usually you'd want to add a new key (password) and then remove the old one (you an have multiple passwords to unlock the master key in LUKS). To do this you just:
luksAddKey <device> [<key file with new key>]
luksRemoveKey <device> [<key file with passphrase to be removed>]
You can also do a:
luksChangeKey <device> [<new key file>]
but there is a risk that you could lose all your data if there is an overwrite failure.
Additional information on these commands can be found by typing man cryptsetup and doing a search for luksAddKey.
Open Disks (gnome-disk-utility), select the encrypted partition, click the little settings button and hit Change Passphrase. Make sure to do a backup beforehand, just in case.
Thank's didn't see that one, I use KDE and it also has a utility for it. I go to Applications -> Utilities -> Disks and there the disk's are listed. From there I can change the passhrase's.
Are you using EncFS? If you are then the password change command is encfsctl passwd <mount-point>, but the drive should be mounted for this to work.
So I have some questions.
These commands you show manipulate the key, not the password, are you sure you want to rekey the encryption? The new key should have a password assigned to prevent anyone just booting up and using it, if you change the key, the password you need will be the one protecting the new key.
Is this password an encryption key password? It's not just a bootup password imposed by the BIOS is it?
If you have enough disk space, you could copy out the encrypted filesystem contents as a backup, delete the encrypted filesystem, restore it from the backup as unencrypted, then go through the rigmarole of setting up encryption again with new keys. That does seem a bit like overkill for this problem, though.
I think it's LUKS, I'm pretty sure it's LUKS, it's the encryption that fedora uses for the install process(from the official dvd)
@cobra 1. I think there comes a new key from one of those commands , This is what it says on fedora docs if I want to add a new passphrase to the device : Add a new passphrase to an existing device. 2. It's an encryption password. I encrypted my whole disk when installing fedora and this is the password it askes me at every boot. 3. Thanks for option three. It's an option. Still I don't think it's possible, as the whole drive or drives are encrypted.
Asked: 2014-04-11 02:21:19 -0600
Seen: 7,159 times
Last updated: Feb 02 '16
Ask Fedora is community maintained and Red Hat or Fedora Project is not responsible for content. Content on this site is licensed under a CC-BY-SA 3.0 license.
