I tried the following

sudo cryptsetup luksChangekey /dev/nvme0n1p3 < new passphrase >

It then asks for the Sudo password, then asks for the old passphrase, but then it prints this error message

Failed to open key file.

what went wrong ?

Edit: turns out using GNOME Disks is way more straightforward… 😅, thank you all

  • scsi@lemm.eeEnglish
    4·
    1 month ago

    Refer to the cryptsetup-luksChangeKey man page --key-file options, you cannot change the password directly on a commandline; you either (a) type it interactively, (b) put it in a keyfile, or © accept input from STDIN with the standard use of - on the end (e.g. echo "mypass" | cryptsetup luksChangeKey /dev/sda - )

  • NoamParenti [they/them]@hexbear.netEnglish
    3·
    1 month ago

    The correct syntax is cryptsetup luksChangeKey <device> <key file>. So what you tried is opening a file that is named like your new passphrase. Such a file of course (hopefully) doesn’t exist.

    Just omit the last parameter, i.e. sudo cryptsetup luksChangekey /dev/nvme0n1p3 and enter the new password when it asks you to.

    • 乇ㄥ乇¢ㄒ尺ㄖOPEnglish
      2·
      1 month ago

      It asks for the sudo password, then it prints

      No usable token is available.

      Then it asks : Enter passphrase for /dev/nvme0n1p3:

      After entering my old passphrase it prints:

      Key slot 0 unlocked
Command Successful.
      • booooop [any]@hexbear.netEnglish
        2·
        1 month ago

        Alright so no permission issue, what if you run the changekey command in a separate bash subprocess? sudo bash -c '($your-changekey-command-here)'

        • 乇ㄥ乇¢ㄒ尺ㄖOPEnglish
          2·
          1 month ago

          Is it like the same first “cryptsetup luksChangekey…” But inside parentheses ? Im sure I’m getting the syntax wrong… It prints

          bash: line 1: -luksChangekey: command not found