Consulting the Internet documentation and the UNIX manpages of ecryptfs
, I found a bit confusing the random use of login and mount passphrases, wrapping and wrapped passphrases.
For instance, from man ecryptfs-unwrap-passphrase
:
ecryptfs-unwrap-passphrase is a utility to unwrap an eCryptfs mount
passphrase from file, using a specified wrapping passphrase, and
display the decrypted result on standard out.
Running the command from terminal, the user is prompted with 'passphrase', that I discovered is supposed to be the login passphrase, in order to recover the mount passphrase. So I guess that login and wrapping passphrases should refer to the same passphrase as well as mount and wrapped passphrases.
My question is: how, if possible, can I change login and mount passphrases?
ecryptfs-setup-private
ran with no options (as I did) is supposed to create a new Private encrypted folder with following passphrases:
- the login passphrase must match the Ubuntu user login password, so that by default when the user log in Ubuntu automatically the private folder is mounted
- the mount passphrase is randomly created, unless the user type a custom passphrase
I decided to Log in Ubuntu with the folder remaining encrypted so I deleted file ~/.ecryptfs/auto-mount
.
Now I would like to know if ecryptfs login passphrase can be changed and set different from my Ubuntu user login password.
Is ecryptfs-rewrap-passphrase
what I need?
I also would like to know if I can change ecryptfs mount passphrase, because I chose a custom passphrase when it should be safer a random 16 bytes passphrase. I could not find any help on this.
Is running again ecryptfs-setup-private
with options -f
and -w
a solution?