Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Running 12.04. I am trying to separate my wrapped-passphrase for my encrypted home folder to require a USB drive be present to login.

I followed the instructions here and added the drive to my fstab, put the wrapped-passphrase file on the drive, and then created a symbolic link back to ~/.ecryptfs. The drive mounts fine but the symbolic link doesn't seem to be connecting the two as when I login it flashes a purple screen for a fraction of a second than takes me back to the login screen. What am I doing wrong?

share|improve this question
Could you run ls -l /home/youruser/.ecryptfs – David Dec 27 '12 at 21:45
In addition to the above, please also do tail /var/log/syslog immediately after such a failed login attempt and post the output. This will contain any ecryptfs errors. – tgies Dec 29 '12 at 14:57

This thread details how to use a USB stick as your boot device, though for different reasons. I like the fact that without the stick the machine appears to have no OS on it.

share|improve this answer
Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Eliah Kagan Jan 31 '13 at 14:43

Have you considered this: "How to Secure SSH with Google Authenticator’s Two-Factor Authentication"?

Its not a USB it is an app on our phone that generates a code.

share|improve this answer
I dont think he is talking about google authentication – Sreevisakh Mar 24 '13 at 17:26
I get that hes not talking about Google auth. (I read the post) I mentioned it because it is a two factor system, and it seems that the purpose of OP's link was to secure the hard drive with 2 factor. The google auth system is a "something you have" this it is somewhat relevant. i would have left that link as a comment, but I lacked the rep at the time. – wlraider70 Mar 24 '13 at 18:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.