cryptsetup

Manage plain dm-crypt and LUKS (Linux Unified Key Setup) encrypted volumes. Some subcommands such as luksFormat have their own usage documentation. More information: https://manned.org/cryptsetup.

• Initialize a LUKS volume with a passphrase (overwrites all data on the partition):

cryptsetup luksFormat {{/dev/sdXY}}

• Open a LUKS volume and create a decrypted mapping at /dev/mapper/mapping_name:

cryptsetup open {{/dev/sdXY}} {{mapping_name}}

• Display information about a mapping:

cryptsetup status {{mapping_name}}

• Remove an existing mapping:

cryptsetup close {{mapping_name}}

• Change a LUKS volume’s passphrase:

cryptsetup luksChangeKey {{/dev/sdXY}}