Is it possible to change the full disk encryption password after installation?
2
-
I have deleted the passphrase but it still asks me for it when i boot my laptop. Why i type in my old passphrase it says: "No key available with this passphrase". Please help! ☹️– Thomas ArtmannDec 22, 2017 at 16:16
-
I think if you delete your passphrase and don't create another one it will lock you out of the disk. Thanks for raising this issue, I will modify the answer accordingly so others don't suffer the same fate.– SethFeb 11, 2018 at 17:41
Add a comment
|
1 Answer
Open up a terminal and type:
sudo cryptsetup luksChangeKey /dev/sda5 -S 0
If you want to add another passphrase:
sudo cryptsetup luksAddKey /dev/sda5
If you want to see which keyslots are enabled:
sudo cryptsetup luksDump /dev/sda5
If you want to erase keyslot #1:
sudo cryptsetup luksRemoveKey /dev/sda5 -S 1
DO NOT erase the last remaining keyslot without creating another one or you'll lock yourself out of the disk.
Hat tip to the good ole Arch Wiki
-
-
The default (key slot 0) full disk encryption password created by the Elementary installer– SethMay 1, 2016 at 1:18
-
3You can find out what drive you need to use (rather than
/dev/sda5, which is specific to Seth's setup) by typinglsblk --fsat a terminal and looking for the line that sayscrypto_LUKS. Oct 24, 2017 at 22:16