LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 11-22-2010, 12:52 AM   #1
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 187

Rep: Reputation: 30
How does one change login passphrase (to unlock encrypted home directory)


Hello,

I just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
 
Old 11-22-2010, 02:57 AM   #2
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by tonyfreeman View Post
Hello,

I just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
Is your account password being used as the passphrase for the encryption key? If so, just use the passwd command.

Last edited by win32sux; 11-22-2010 at 03:00 AM.
 
Old 11-22-2010, 09:43 AM   #3
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 187

Original Poster
Rep: Reputation: 30
passphrase for mouting / (root) directory

The passphrase is different from my password.

I miss informed in my earlier post (it was late for me) it is not only the home directory that is protected by the passphrase but the root '/' directory. Booting the machine stops for me to type in the passphrase. This is good and is what I want ... but now I realize that my passphrase could be guessed a lot easier than I thought ... so i want to change it.
 
Old 11-22-2010, 09:43 AM   #4
baltazar3
LQ Newbie
 
Registered: Nov 2009
Posts: 13

Rep: Reputation: 0
Assuming Debian uses cryptsetup for this, you can use cryptsetup luksAddKey and cryptsetup luksRemoveKey. See man cryptsetup.
 
Old 11-22-2010, 09:12 PM   #5
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 187

Original Poster
Rep: Reputation: 30
Smile cryptsetup luksAddKey / luksRemoveKey

Thanks ... that helped me get the crappy passphrase changed.

The process was to add the new passphrase, test it, remove the old passphrase:

Code:
cryptsetup luksAddKey /dev/sda5
That asked me for the existing passphrase which I provided and then enter my new passphrase twice. I rebooted and provided this new passphrase to make sure it worked. I rebooted once again and provided the old passphrase and that worked as well.

Code:
cryptsetup luksRemoveKey /dev/sda5
I provided my old passphrase (the one I wanted to remove) and then had to provide my 'remaining' (new) passphrase for confirmation.

Thanks for your help
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to recover my encrypted Home directory pazzport Linux - Desktop 7 05-15-2012 12:30 AM
fsck or equivalent for my encrypted home directory cantab Ubuntu 2 09-20-2010 02:41 PM
Cannot mount unencrypted directory to encrypted home directory with fstab? Daravon Ubuntu 35 09-14-2010 04:50 AM
using encrypted home directory with xubuntu 9.10 live usb joe2748 Ubuntu 1 02-23-2010 05:54 AM
LXer: Ubuntuís Encrypted Home Directory: A Canonical Approach to Data Privacy LXer Syndicated Linux News 0 10-22-2009 11:31 PM


All times are GMT -5. The time now is 02:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration