In Ubuntu 16.04 you have the option of encrypting the /home/$USER directory with ecryptfs just by ticking a box at install time. /home/$USER is unlocked seamlessly when you log in. The install process tells you that this key is encrypted using your $USER password
If I change my user password using "sudo passwd" will the decrypt keys be automatically re-encrypted? What if I do it from a different account like "sudo passwd $USER"?