Using the Disks application:

Question

111

How to change the password of an encrypted LVM system (previously alternate Installation, now advanced feature)?

rated 0 times [ 111] [ 0] / answers: 1 / hits: 181335 / 2 Years ago, wed, december 1, 2021, 2:27:49

I installed Ubuntu 11.10 with the alternate CD and encrypted the whole system (except boot) with the encrypted LVM. Update 2020: Encrypted LVM can be selected at the Installation type step of the Ubuntu install, click on Advanced features and choose Use LVM and Encrypt ...

Everything works great as before, but I would like to change the password of the encrypted LVM. I tried to follow the Tips and Tricks of this article, but it does not work.
After typing:

sudo cryptsetup luksDump /dev/sda5

It says: "Device /dev/sd5 doesn't exist or access denied."
I thought the encrypted partition is /dev/sda5.
Any help how to change the password?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

girdleas

Add To Favorites

Follow

Total Points: 1

Total Questions: 112

Total Answers: 114

Location: Lesotho

Member since Wed, Jun 2, 2021

3 Years ago

girdleas questions

1 Xubuntu window bar font not rendering properly with dark themes

Wed, Dec 22, 21, 03:08, 2 Years ago

1 Ubuntu server 18.04.05 LTS apt update / install snmp snmp-mibs-downloader error

Sat, Nov 12, 22, 02:58, 1 Year ago

1 Website is not loading index.php and showing index of folder

Fri, Jun 18, 21, 04:41, 3 Years ago

1 Upstart to automount USB in Ubuntu Server 20.04

Thu, Mar 10, 22, 00:17, 2 Years ago

1 How do I add a line to the shell script?

Wed, May 18, 22, 22:02, 2 Years ago

View All

answered 2 Years ago lowovey · Accepted Answer

Using the Disks application:

In Ubuntu 18.04 or newer there is the possibility of using (Gnome) Disks. Thanks for the hint, Greg Lever, after clicking around I found what Greg mentioned:

Open Gnome Disks.

Choose/Click on the main physical hard drive in the left panel.

Click on the LUKS encrypted partition, in this example it is Partition 3:

Click on the edit icon (cogs, gear wheels) and choose "Change Passphrase".

If you get an error, close GNOME Disks and open it in a terminal: sudo gnome-disks

(This helped @ScriptAutomate, thank you for the tip.)

Or using the command-line:

Here is the answer that worked for me, after Hamish helped me to realize my typo.

WARNING (for older Ubuntu versions, newer (e.g. 19.04) should be bug-fixed but be careful anyway): If you only have one key and remove it before adding another, you will render your disk inaccessible after rebooting! This also means you can not add a new key anymore afterwards. Thanks waffl and khaimovmr for these helpful comments.

First, you need to find out which is the encrypted LVM partition, it may be sda3, but it can also be sda5 (default on Ubuntu LVM), sdX2, ...:

cat /etc/crypttab

To add a new password, use luksAddKey:

sudo cryptsetup luksAddKey /dev/sda3

To remove an existing password, use luksRemoveKey, by typing the passphrase to remove:

sudo cryptsetup luksRemoveKey /dev/sda3

View currently used slots of the encrypted partition (make sure at least one slot is shown):

sudo cryptsetup luksDump /dev/sda3

Cited from this blog. Thanks.

Be aware: Flimm experienced that Ubuntu's system keyboard layout changed from Dvorak to Qwerty. You cannot see which keyboard layout you are using (bug #1862656) and you cannot choose to display the password (bug #1862654). Also, you only get three tries before being forced to wait for 60 seconds (bug #1862660). Thanks flimm for the helpful comment!