Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase.

Preferably, this should be done using GUI tools, thus, enabling novice users to perform this basic task.

share|improve this question

I am not familiar with gui tool but cryptsetup is the tool to interact with luks.

Basically AFAIK luks lets you add 8 passphrase slots and you can do that with:

sudo cryptsetup -y luksAddKey ENCRYPTED_PARTITION
sudo cryptsetup luksRemoveKey ENCRYPTED_PARTITION

where 0 is the slot number. I guess luks stores slots as 0,1,2 etc. But I recommend you to be very careful with luks as you may lock yourself out. Please refer to manual of cryptsetup. Also I recommend you to visit other distro IRC channel just to be extra safe before you proceed.

You may need to reboot the machine and try your new passsphrase as well before you remove the key.


EDIT: Seems like gnome-disk-utility lets you change the passphrase.

enter image description here

enter image description here

share|improve this answer
cryptsetup luksRemoveKey <partition> actually takes a keyfile as the last parameter. So if you want to input the passphrase, just give the device as parameter. cryptsetup will first prompt for "Enter LUKS passphrase to be deleted:" and then "Enter any remaining LUKS passphrase:" – user1338062 Apr 17 '13 at 9:30
You made my day. Thanks! – krlmlr Oct 10 '14 at 10:26
Avoid the gnome utility if your passphrase is very long, it may cut your input... – Thomas May 30 '15 at 20:51
@Thomas or whoever else is interested: at least 14 characters are not too long for the gnome disk utility. – KlaymenDK Apr 13 at 13:52

Tested in ubuntu 14.04: Search for the "Disks" application

Select Device, select volume, Click cogs (more actions) -> "Change passphrase"


share|improve this answer
Doesn't work with "long" passphrases... – Thomas May 30 '15 at 20:47
What actual application is this please? apt-get install ??? – shadowbq Oct 9 '15 at 13:16
FYI: gnome-disk-utility / apt-get install gnome-disk-utility && gnome-disks – shadowbq Oct 9 '15 at 13:23
This is the built-in Disks application. No need to install anything. It works with fairly decent passwords. I haven't tried anything over 20 characters though. – Alain O'Dea Nov 26 '15 at 2:55
cryptsetup luksChangeKey <target device> -S <target key slot number>

This will ask you first for a valid pass-phrase (in any enabled keyslot) then will prompt you fro the new passphrase in the target keyslot

I'm sure this can be wrapped up in an applet got windows oriented lovers.

share|improve this answer
You will be asked for the new Password only Once (No confirmation) so make sure you spell it right. Works fine for me – Turtlepurple Sep 16 '15 at 21:18
In 12.04.5 I was asked for the new password twice. – Devin Lane Sep 19 '15 at 21:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.