OpenBSD Disk Encryption: Change passphrase

( modified )

Is it possible to change the passphrase after applying Full Disk Encryption by it to your OpenBSD server ?

Yes !! This post shows how. It’s a really simple way with bioctl.

First, login to your server. Then run:

$ doas bioctl -P sd1

Well, in this example, sd1 is CRYPTO volume introduced by softraid. (Moreover, sd0 is the origin disk.) In other words, sd1 here is where OpenBSD was actually installed via the installer.

You will be asked:

Old passphrase: 
New passphrase: 
Re-type passphrase:

Enter them. That’s it !!!

When reboot it, you will be accepted with the new passphrase.


Disk Encryption
  1. OpenBSD Full Disk Encryption (on VirtualBox)
  2. OpenBSD Disk Encryption: Change passphrase

Comments or feedbacks are welcomed and appreciated.