I think you want these two eCryptFS tools (scripts really):
ecryptfs-recover-private
- find and mount any encrypted private directories
Use this to mount your old encrypted home, and copy / back them up somewhere safe.
ecryptfs-migrate-home
- migrate a user's home to directory to an encrypted home setup
It's man
page contains this warning:
WARNING: Make a complete backup copy of the non-encrypted data to
another system or external media. This script is dangerous and in
case of an error, could result in data lost, or lock USER out of the
system!
So I'd definitely do the ecryptfs-recover-private
and create backup copies first, if the data has any value.
BUT you absolutely must have your old login passphrase in order to decrypt your old encrypted home (unless you already have a backup copy of the actual eCryptfs mount passphrase). From your statement I forgot my password you might be out of luck unless you can guess/remember your old password.
Recovering your files from a backup copy would be much easier, if you have a backup copy (everyone really should have backup copies of important data, all drives fail eventually, and forgetting passphrases is easy to do).
FYI, your actual encrypted files and wrapped-passphrase
file should be stored in /home/.ecryptfs
, along with every user's encrypted home. The actual home folder (for example /home/[username]
only has links to the actual folders, and 2 help files. Specifically:
- Your encrypted files should be in
/home/.ecryptfs/[username]/.Private
wrapped-passphrase
and other config files should be in /home/.ecryptfs/[username]/.ecryptfs