cryptsetup

Manage plain dm-crypt and LUKS (Linux Unified Key Setup) encrypted volumes. Some subcommands such as luksFormat have their own usage documentation. More information: https://manned.org/cryptsetup.

• Initialize a LUKS volume with a passphrase (overwrites all data on the partition):

cryptsetup luksFormat /dev/sdXY

• Open a LUKS volume and create a decrypted mapping at /dev/mapper/mapping_name:

cryptsetup open /dev/sdXY mapping_name

• Display information about a mapping:

cryptsetup status mapping_name

• Remove an existing mapping:

cryptsetup close mapping_name

• Change a LUKS volume’s passphrase:

cryptsetup luksChangeKey /dev/sdXY