Full disk encryption
Also known as FDE for short.
If your device has a Y
in the FDE column of the all devices table, you can enable full disk encryption with the --fde
parameter.
Needs to be ported to devices individually following this https://wiki.postmarketos.org/wiki/Osk-sdl#Porting_to_New_Devices
Changing Luks Password
To change your luks password, connect your phone's storage medium to a Linux computer with cryptsetup installed.
Run the following command:
sudo cryptsetup luksChangeKey <target-device> -S 0
I can get the target device by running the lsblk
command. For example, if my storage medium's partition table looked like:
sde 8:64 1 14.7G 0 disk
├─sde1 8:65 1 110M 0 part
└─sde2 8:66 1 14.6G 0 part
To change my password, I would run:
sudo cryptsetup luksChangeKey /dev/sde2 -S 0