cryptsetup
Manage plain dm-crypt
and LUKS (Linux Unified Key Setup) encrypted volumes.
Some subcommands such as luksFormat
have their own usage documentation.
More information: https://manned.org/cryptsetup.
- Initialize a LUKS volume with a passphrase (overwrites all data on the partition):
cryptsetup luksFormat
/dev/sdXY
- Open a LUKS volume and create a decrypted mapping at
/dev/mapper/mapping_name
:
cryptsetup open
/dev/sdXY
mapping_name
- Display information about a mapping:
cryptsetup status
mapping_name
- Remove an existing mapping:
cryptsetup close
mapping_name
- Change a LUKS volume's passphrase:
cryptsetup luksChangeKey
/dev/sdXY