Share your knowledge at the LQ Wiki.
Go Back > Forums > Non-*NIX Forums > General
User Name
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!


  Search this Thread
Old 06-23-2019, 02:59 AM   #1
LQ Newbie
Registered: Apr 2019
Posts: 14

Rep: Reputation: Disabled
which is more secure? a key file or a passphrase

Hi everyone

I'm curious to know which is better a keyfile or passphrase for cryptsetup? I know there a pro and con for either one.

Old 06-23-2019, 04:05 AM   #2
Senior Member
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 4,020
Blog Entries: 3

Rep: Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918
Welcome, but please re-read the forum guidelines on how to ask a question properly. As phrased, your query lacks the information needed to help you with it. Also, we do not do homework. We can help you over the hard parts but you'll have to do the actual work yourself.

That said, what do you mean by "cryptsetup" and how do you plan to use it?
Old 06-24-2019, 11:08 PM   #3
Registered: Jul 2004
Location: Chennai, India
Distribution: UBUNTU 5.10 since Jul-18,2006 on Intel 820 DC
Posts: 888

Rep: Reputation: 208Reputation: 208Reputation: 208
They are fundamentally different aspects (factors) of security.
- A key file is a file - WHAT YOU HAVE ON A COMPUTER.
- A passphrase is usually - WHAT YOU KNOW AND NOT STORED ON A DEVICE.

I would say that in normal usage, a passphrase is more secure.


Last edited by AnanthaP; 06-24-2019 at 11:11 PM.
Old 06-25-2019, 12:41 AM   #4
Registered: Aug 2004
Location: Albany, Western Australia
Distribution: Mageia , SME , IP Fire, LinuxMX
Posts: 636
Blog Entries: 2

Rep: Reputation: 114Reputation: 114
Originally Posted by Turbocapitalist View Post
That said, what do you mean by "cryptsetup" and how do you plan to use it?
possibly referring to
Old 06-25-2019, 06:05 AM   #5
Michael Uplawski
Registered: Dec 2015
Location: Normandy, France
Distribution: Debian “testing” with very little “unstable”
Posts: 771
Blog Entries: 25

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
man cryptsetup
cryptsetup is used to conveniently setup dm-crypt managed device-mapper
mappings. These include plain dm-crypt volumes and LUKS volumes. The
difference is that LUKS uses a metadata header and can hence offer more
features than plain dm-crypt. On the other hand, the header is visible
and vulnerable to damage.
In addition, cryptsetup provides limited support for the use of loop-
AES volumes and for TrueCrypt compatible volumes.
A passphrase that you can remember is either too short, too simple or too easily forgotten.
A file that you keep on your computer is either too simple to find or too simply destroyed, as you keep forgetting what it was doing.

The most embarrassing thing is probably the word “better”.

The rest is in the documents.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Which is more secure? A passphrase or key file for cryptsetup? CWLang Linux - Newbie 3 03-16-2017 09:44 AM
[SOLVED] Which is more secure a cryptic password or passphrase? dukes123 Linux - Newbie 7 08-16-2015 12:42 PM
SSH not saving key passphrase. Trying every key Wnt2bsleepin Linux - Software 0 05-27-2013 09:45 PM
Revoking GPG key with only passphrase and public key djib Linux - Security 2 03-13-2007 03:20 AM
ssh / ssh-key -- its always asking for passphrase BaerRS Linux - General 1 01-07-2003 06:21 PM > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 12:06 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration