Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I recently installed Ubuntu 12.10 and it requires a passphrase to boot up (I installed it with an encrypted file system).

Do I have to reinstall to change to a standard unencrypted file system?

share|improve this question
Did you encrypt the entire Ubuntu installation, or just your home directory? – Flimm Jan 19 at 21:30
I encrypted during install, so I'm guessing the entire install. – Zzealdor Jan 19 at 22:08
I'm a new user so I'm unsure how stuff works in Linux (Got totally fed up with Microsoft!) – Zzealdor Jan 19 at 22:26
@Rinzwind Probably not. This method (ecryptfs) encrypts the home directory and doesn't need an extra password; the login password is used. – Jan Jan 19 at 23:03

1 Answer

up vote 3 down vote accepted

If Ubuntu asks for an encryption passphrase during boot (i.e. on the text console before the login screen is displayed), this indicates that a full disk encryption method was used. (There's more than one way to do this, but I'll keep the answer general.) The encryption is handled by an extra software layer between the file system and the physical hard drive, not the file system itself.

There is no simple method or tool to undo this. With some knowledge about how Linux systems work, it can be done. You'd have to move the whole file system (or all files) to another partition (with enough free space) or external HDD. Then, remove the encrypted container, and recreate the file system without encryption. Finally, make sure that the new file system is properly recognized by the boot loader and mount -a before rebooting.

If possible, it's best to avoid this time consuming and error-prone procedure. Just do a fresh install. For a new users, this is the quickest and safest option.

PS: Chances are that you can change the encryption passphrase, possibly to an empty string. Then decrypting only requires to press Enter. Maybe you can go further and supress to (now useless) passphrase prompt. However, this does not disable the encryption. The data would still be encrypted although the encryption would be useless since the key can be trivially guessed.

share|improve this answer
Thanks Jan, I will reinstall. – Zzealdor Jan 19 at 23:30
In theory, should you not be able to do something like "dd if=/dev/mapper/sda5_crypt of=/dev/sda5 bs=32M" ? – Roy 2 days ago

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.