How to change pass phrase of full disk encryption?

Ubuntu uses LUKS to encrypt partitions and LVMs.

LUKS supports eight key slots per partition. The cryptsetup luksAddKey and cryptsetup luksRemoveKey can be used to add and remove keys from the slots. cryptsetup luksDump can tell you which slots have keys in them.

Basically the right way to do this is you want to add a key to a new slot, test that you can successfully use the new key, and then when you are ready, delete the old key.

During the boot process, when you are asked for the key, it should tell which block device it's trying to unlock. That's the partition you need to apply the cryptsetup commands to.

So use cryptsetup to add a key, reboot, and try the new key. Once you can confirm that works, you can delete the old key.

I would back up your data before trying this or taking anyone else's advice, or at least wait for a couple upvotes. It's been a while since I changed a key on a LUKS partition. (edit: or used a Linux system with GUI...)


This is the easiest way to do it:

  1. Press Super.

  2. Type Disk Utility and launch the program with the same name.

  3. Select the encrypted partition.

  4. Click Change passphrase.


Here is what to do

  • Go to Dash Home
  • Search for Disks and click it
  • Select your hard disk on the left

Now look to the right. There are likely to be several partitions.

  • Select one of them.
  • Look for the tiny logo of two gears
  • Click on the gears

The option to change passphrase will be available if its the right partition.
If its not there, select another partition. Most likely, the correct partition will be Partition 5