OpenBSD Disk Encryption: Change passphrase

created
( modified )
@nabbisen

Is it possible to change the passphrase after applying Full Disk Encryption by it to your OpenBSD server ?

Yes !! This post shows how. It’s a really simple way with bioctl.

First, login to your server. Then run:

$ doas bioctl -P sd1

Well, in this example, sd1 is CRYPTO volume introduced by softraid. (Moreover, sd0 is the origin disk.) In other words, sd1 here is where OpenBSD was actually installed via the installer.

You will be asked:

Old passphrase: 
New passphrase: 
Re-type passphrase:

Enter them. That’s it !!!

When reboot it, you will be accepted with the new passphrase.

Series

Disk Encryption
  1. OpenBSD Full Disk Encryption (on VirtualBox)
  2. OpenBSD Disk Encryption: Change passphrase

Comments or feedbacks are welcomed and appreciated.