Full disk encryption

From postmarketOS
Jump to navigation Jump to search

Also known as FDE for short.

If your device has a Y in the FDE column of the all devices table, you can enable full disk encryption with the --fde parameter.

Needs to be ported to devices individually following this https://wiki.postmarketos.org/wiki/Osk-sdl#Porting_to_New_Devices

Changing Luks Password

To change your luks password, connect your phone's storage medium to a Linux computer with cryptsetup installed.

Run the following command:

sudo cryptsetup luksChangeKey <target-device> -S 0

I can get the target device by running the lsblk command. For example, if my storage medium's partition table looked like:

sde 8:64 1 14.7G 0 disk

├─sde1 8:65 1 110M 0 part

└─sde2 8:66 1 14.6G 0 part

To change my password, I would run:

sudo cryptsetup luksChangeKey /dev/sde2 -S 0