2

Is it possible to change the full disk encryption password after installation?

  • I have deleted the passphrase but it still asks me for it when i boot my laptop. Why i type in my old passphrase it says: "No key available with this passphrase". Please help! ☹️ – Thomas Artmann Dec 22 '17 at 16:16
  • I think if you delete your passphrase and don't create another one it will lock you out of the disk. Thanks for raising this issue, I will modify the answer accordingly so others don't suffer the same fate. – Seth Feb 11 '18 at 17:41
2

Open up a terminal and type:

sudo cryptsetup luksChangeKey /dev/sda5 -S 0

If you want to add another passphrase:

sudo cryptsetup luksAddKey /dev/sda5

If you want to see which keyslots are enabled:

sudo cryptsetup luksDump /dev/sda5

If you want to erase keyslot #1:

sudo cryptsetup luksRemoveKey /dev/sda5 -S 1

DO NOT erase the last remaining keyslot without creating another one or you'll lock yourself out of the disk.

Hat tip to the good ole Arch Wiki

  • What password does this change – Suici Doga May 1 '16 at 1:16
  • The default (key slot 0) full disk encryption password created by the Elementary installer – Seth May 1 '16 at 1:18
  • 1
    You can find out what drive you need to use (rather than /dev/sda5, which is specific to Seth's setup) by typing lsblk --fs at a terminal and looking for the line that says crypto_LUKS. – brandones Oct 24 '17 at 22:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.