LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-21-2010, 11:52 PM   #1
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 196

Rep: Reputation: 30
How does one change login passphrase (to unlock encrypted home directory)


Hello,

I just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
 
Old 11-22-2010, 01:57 AM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by tonyfreeman View Post
Hello,

I just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
Is your account password being used as the passphrase for the encryption key? If so, just use the passwd command.

Last edited by win32sux; 11-22-2010 at 02:00 AM.
 
Old 11-22-2010, 08:43 AM   #3
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 196

Original Poster
Rep: Reputation: 30
passphrase for mouting / (root) directory

The passphrase is different from my password.

I miss informed in my earlier post (it was late for me) it is not only the home directory that is protected by the passphrase but the root '/' directory. Booting the machine stops for me to type in the passphrase. This is good and is what I want ... but now I realize that my passphrase could be guessed a lot easier than I thought ... so i want to change it.
 
Old 11-22-2010, 08:43 AM   #4
baltazar3
LQ Newbie
 
Registered: Nov 2009
Posts: 13

Rep: Reputation: 0
Assuming Debian uses cryptsetup for this, you can use cryptsetup luksAddKey and cryptsetup luksRemoveKey. See man cryptsetup.
 
Old 11-22-2010, 08:12 PM   #5
tonyfreeman
Member
 
Registered: Sep 2003
Location: Fort worth, TX
Distribution: Debian testing 64bit at home, EL5 32/64bit at work.
Posts: 196

Original Poster
Rep: Reputation: 30
Smile cryptsetup luksAddKey / luksRemoveKey

Thanks ... that helped me get the crappy passphrase changed.

The process was to add the new passphrase, test it, remove the old passphrase:

Code:
cryptsetup luksAddKey /dev/sda5
That asked me for the existing passphrase which I provided and then enter my new passphrase twice. I rebooted and provided this new passphrase to make sure it worked. I rebooted once again and provided the old passphrase and that worked as well.

Code:
cryptsetup luksRemoveKey /dev/sda5
I provided my old passphrase (the one I wanted to remove) and then had to provide my 'remaining' (new) passphrase for confirmation.

Thanks for your help
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to recover my encrypted Home directory pazzport Linux - Desktop 7 05-14-2012 11:30 PM
fsck or equivalent for my encrypted home directory cantab Ubuntu 2 09-20-2010 01:41 PM
Cannot mount unencrypted directory to encrypted home directory with fstab? Daravon Ubuntu 35 09-14-2010 03:50 AM
using encrypted home directory with xubuntu 9.10 live usb joe2748 Ubuntu 1 02-23-2010 04:54 AM
LXer: Ubuntu’s Encrypted Home Directory: A Canonical Approach to Data Privacy LXer Syndicated Linux News 0 10-22-2009 10:31 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:00 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration