Disk decryption passphrase

This is so timely, I was just getting ready to ask Tech Support this question, as I’ve just opened the box and started it up! Definitely need to get that into the manual. Handwritten in Sharpie if nothing else (don’t wait for new documentation).

1 Like

No, they are separate. The disk passphrase is a LUKS password, the user password is, well, the OS user password.

I think the user passphrase can be changed in settings (but yes, for now it’s numbers only), whereas I don’t think we have anything graphical to change disk encryption, but you can pick up any LUKS guide to change it from the command line.

2 Likes

I believe it can be changed via GUI in GNOME Disks.

1 Like

Yes, I tried, and it worked.
Disks > SD Card Reader > Partition 2, 31 GB LUKS > Gears button > Change Passphrase…

Which part is encrypted with this passphrase? Where /home/purism is, or something else?

Whole disk except /boot.

Sometimes, after entering the correct disk decryption passphrase, it says something after 5-6 secs in the middle of the black screen as one line that it has to cancel something related to decryption. It’s to fast to memorize it. I will try to capture it with the cam of another mobile… Or do you know what the message could be and wants to say?

Just Reflashed my L5 Phone, but LUKS Disk Encryption is not enabled.

How to reflash to get LUKS Disk Encryption?

Use this HowTo:

1 Like

Isn’t LUKS disk encryption now standard with the reflash process?

From the first post in this topic it seems disk encryption is now standard on new L5s.

1 Like

With the delivery of a new L5. If you want to use the encryption you have to flash it with the HowTo :slight_smile:

Why this complicated way?

There must be a factory image with LUKS disk encryption which can be provided and used with the official Reflash procedure.

1 Like

I received my Librem5 this week. Disk encryption was enabled by default.

Yes, after entering the decryption passphrase correctly, it says for a short moment

cryptsetup: crypt_root: set up successfully

Sometimes it gives an error message, even when the passphrase was correct. It seems this happens, when the shutdown was not executed correctly. Will try to find the pattern and grab a video of the message.

1 Like

That’s most likely fsck.

I received my Librem 5 Evergreen today, after four years since my order. I put it in charge, without turning it on, the message “Enter disk decryption passphrase” appeared. Question, what is the passphrase of my device? and why is it required in the charging phase?

This is what you’re looking for – it’s the same for all phones that ship (until you change it). How to change each of them is in various responses to the post.

1 Like

Thanks, but i think it should be indicated on the “quick start guide”.

1 Like

We think so too:

I dont think so. I know fsck output for 30++ years. This message on the L5 in a one liner and says something about decrypt canceled....