Version 8 vs 11
Version 8 vs 11
Content Changes
Content Changes
{nav icon=home, name=Main Page >
icon=info-circle, name=PureOS >
icon=list-ul, name=Tips & Tricks >
Change Disk Encryption Password}
How to change the password of an encrypted LVM system
---
IMPORTANT: You might want to backup your data to an external hard disk before doing this, as a precaution.
Method 1: Using the terminal
=======================
LUKS allows for an encrypted partition/system to have multiple passwords and also to remove them. So to change the password we first add the new password and then remove the old one.
- Get the name of the encrypted volume
Open the terminal application [[ https://tracker.pureos.net/w/pureos/desktop/terminal_emulator/ | Tilix ]] and type the command:
{icon terminal} `lsblk`
It will show you the name of the partition, ignore `/boot` and `/swap`
{F289726, width=790, alt=cdp1}
NOTE: In this case the encrypted volume is called `sda2`, but on your machine it can have a different name. Make sure you adjusted these commands to with the name of your device!
**Add a new password**
- In `Tilix` run the command:
{icon terminal} `sudo cryptsetup luksAddKey /dev/device_name`
- It will ask you for your user password, type it and press enter.
{F289734, width=790, alt=cdp1}
- Next you will be asked for the old disk encryption password, type it and press enter.
{F289737, width=790, alt=cdp1}
- Type the new password you want for the encrypted disk, and press enter
{F289739, width=790, alt=cdp1}
- Confirm the new password and press enter
{F289741, width=790, alt=cdp1}
The new password is now added
{F289743, width=790, alt=cdp1}
**Removing the old password**
From `Tilix` run the command:
{icon terminal} `sudo cryptsetup luksRemoveKey /dev/device_name`
{F289746, width=790, alt=cdp1}
- Type the password that you want to delete and press enter
{F289754, width=790, alt=cdp1}
---
Method 2: Using GNOME DISKS
============================
IMPORTANT: Because of the bug: https://tracker.pureos.net/T541, please DO NOT USE THIS METHOD on PureOS 9 ("amber") for now! You will lose access to your encrypted disk. If you are using PureOS 10 ("byzantium") this method is safe.
Start up ** GNOME Disks** and click the encrypted volume you wish to change the password for, click the gear icon and select //Change Passphrase...//:
{F28791, size=full, alt=cdp1}
Enter your current and new password, and that's it:
{F28792, size=full, alt=cdp2}
{nav icon=home, name=Main Page >
icon=info-circle, name=PureOS >
icon=list-ul, name=Tips & Tricks >
Change Disk Encryption Password}
How to change the password of an encrypted LVM system
---
IMPORTANT: You might want to backup your data to an external hard disk before doing this, as a precaution.
Method 1: Using the terminal
=======================
LUKS allows for an encrypted partition/system to have multiple passwords and also to remove them. So to change the password we first add the new password and then remove the old one.
- Get the name of the encrypted volume
Open the terminal application [[ https://tracker.pureos.net/w/pureos/desktop/terminal_emulator/ | Tilix ]] and type the command:
{icon terminal} `lsblk`
It will show you the name of the partition, ignore `/boot` and `/swap`
{F289726, width=790, alt=cdp1}
NOTE: In this case the encrypted volume is called `sda2`, but on your machine it can have a different name. Make sure you adjusted these commands to with the name of your device!
**Add a new password**
- In `Tilix` run the command:
{icon terminal} `sudo cryptsetup luksAddKey /dev/device_name`
- It will ask you for your user password, type it and press enter.
{F289734, width=790, alt=cdp1}
- Next you will be asked for the old disk encryption password, type it and press enter.
{F289737, width=790, alt=cdp1}
- Type the new password you want for the encrypted disk, and press enter
{F289739, width=790, alt=cdp1}
- Confirm the new password and press enter
{F289741, width=790, alt=cdp1}
The new password is now added
{F289743, width=790, alt=cdp1}
**Removing the old password**
From `Tilix` run the command:
{icon terminal} `sudo cryptsetup luksRemoveKey /dev/device_name`
{F289746, width=790, alt=cdp1}
- Type the password that you want to delete and press enter
{F289754, width=790, alt=cdp1}
---
Method 2: Using GNOME DISKS
============================
IMPORTANT: Because of the bug: https://tracker.pureos.net/T541, please DO NOT USE THIS METHOD on PureOS 9 ("amber") for now! You will lose access to your encrypted disk. If you are using PureOS 10 ("byzantium") this method is safe.
Start up ** GNOME Disks** and click the encrypted volume you wish to change the password for, click the gear icon and select //Change Passphrase...//:
{F28791, size=full, alt=cdp1}
Enter your current and new password, and that's it:
{F28792, size=full, alt=cdp2}