Consulting the Internet documentation and the UNIX manpages of
ecryptfs, I found a bit confusing the random use of login and mount passphrases, wrapping and wrapped passphrases.
For instance, from
ecryptfs-unwrap-passphrase is a utility to unwrap an eCryptfs mount
passphrase from file, using a specified wrapping passphrase, and
display the decrypted result on standard out.
Running the command from terminal, the user is prompted with 'passphrase', that I discovered is supposed to be the login passphrase, in order to recover the mount passphrase. So I guess that login and wrapping passphrases should refer to the same passphrase as well as mount and wrapped passphrases.
My question is: how, if possible, can I change login and mount passphrases?
ecryptfs-setup-private ran with no options (as I did) is supposed to create a new Private encrypted folder with following passphrases:
- the login passphrase must match the Ubuntu user login password, so that by default when the user log in Ubuntu automatically the private folder is mounted
- the mount passphrase is randomly created, unless the user type a custom passphrase
I decided to Log in Ubuntu with the folder remaining encrypted so I deleted file
Now I would like to know if ecryptfs login passphrase can be changed and set different from my Ubuntu user login password.
ecryptfs-rewrap-passphrase what I need?
I also would like to know if I can change ecryptfs mount passphrase, because I chose a custom passphrase when it should be safer a random 16 bytes passphrase. I could not find any help on this.
Is running again
ecryptfs-setup-private with options
-w a solution?