passphrase/keyring management: 14.04 whole disk encryption

Question

With 14.04 whole disk encryption can one add multiple passphrases and/or revoke them ?

You should specify which kind of disk encryption protocol you're asking about. There's cryptoloop, dm-crypt, LUKS, TrueCrypt, … — David Foerster, Nov 05 '14 at 20:09

score 3 · Answer 1 · edited Apr 13 '17 at 12:24

3

LUKS:

Basically as far as I know LUKS lets you modify 8 passphrase slots and you can do that with:

sudo cryptsetup luksAddKey <device>
sudo cryptsetup luksRemoveKey <device>
sudo cryptsetup luksChangeKey <device> 
sudo cryptsetup luksKillSlot <device> <key slot number>

LUKS stores slots as 0,1,2 etc. But I recommend you to be very careful with LUKS as you may lock yourself out. Please refer to manual of cryptsetup.

You may need to reboot the machine and try your new passsphrase as well before you remove the key.

CryptSetup

Gnome-disk-utility also lets you change the passphrases.

Gnome Gnome

Source

edited Apr 13 '17 at 12:24

Community

1

answered Nov 10 '14 at 20:47

olipinski

122

How can i add different passkey in disk.so i can use both key to access that disk. – sohel4r Nov 15 '14 at 05:21
Luksaddkey is the command. Or you can do this in the GUI – olipinski Nov 15 '14 at 12:05

score 0 · Answer 2 · answered Nov 15 '14 at 05:29

0

EncryptedFilesystemHowto5

That link provide everything about encryption.He asked about different (add multiple passphrase)

answered Nov 15 '14 at 05:29

sohel4r

464

passphrase/keyring management: 14.04 whole disk encryption

2 Answers2

Linked