Skip to main content
Share Your Experience: Take the 2024 Developer Survey
81 votes
Accepted

Does changing the encryption password imply rewriting all the data?

No. Your password is used to encrypt only the master key. When you change the password, the master key is reencrypted but itself does not change. (This is how some systems, such as BitLocker or LUKS, ...
grawity_u1686's user avatar
72 votes
Accepted

How do I wipe an encrypted USB flash drive?

How do I remove my personal data in the encrypted thumb drive? ... I have forgotten the password … unrecognised device Crush it to small particles using a large hammer then buy your employer a new ...
RedGrittyBrick's user avatar
49 votes

How to mitigate any privacy-related risks associated with taking your laptop for repair?

Unless your hard drive is encrypted linux tools can be use to blank any local windows password. Put a second hard drive in, removing the first and don't put anything sensitive on it in the first ...
cybernard's user avatar
  • 14.1k
46 votes
Accepted

How to mitigate any privacy-related risks associated with taking your laptop for repair?

Physical access to a system is the trump card of security. Passwords can be bypassed, locks broken, data copied, software installed...the list of threats is impressively long. But you may have no ...
I say Reinstate Monica's user avatar
35 votes

Does changing the encryption password imply rewriting all the data?

Grawity's answer is correct. Because encrypting data is a relatively expensive process, it makes more sense to create a single master key that does not change during the lifetime of the encrypted data....
I say Reinstate Monica's user avatar
32 votes

Is a volume with BitLocker "Waiting for Activation" encrypted or not?

To Turn BitLocker Off Without Activation In case where you want to get rid of BitLocker encrpytion without activating it first use: manage-bde c: -off There is no other way to deactivate bitlocker ...
Joachim Otahal's user avatar
24 votes
Accepted

How to securely erase an NVMe SSD

Yes, it's true that hdparm will not work for NVMe drives, because they don't use the traditional ATA interface protocol that SATA drives use to send low-level firmware commands to the drive. ...
Hashim Aziz's user avatar
  • 12.9k
22 votes
Accepted

Is a volume with BitLocker "Waiting for Activation" encrypted or not?

The volume is encrypted but the encryption key is saved "in the clear" The volume is indeed encrypted but BitLocker is "suspended." This means the Full Volume Encryption Key (FVEK) used to scramble ...
I say Reinstate Monica's user avatar
15 votes

How to mitigate any privacy-related risks associated with taking your laptop for repair?

The easiest way is to remove the hard drive before taking it in for repair. Presumably the technician can use a USB disk to diagnose the problems. Alternatively - and not ideally - watch over the ...
davidgo's user avatar
  • 71.1k
13 votes

How do I wipe an encrypted USB flash drive?

As @jehad mentioned, use gparted utility. It is an open-source utility for disk managment, supporting a bunch of file systems. You didn't mention what OS are you using — for most of them you can get ...
Hi-Angel's user avatar
  • 515
11 votes

Is it better to use Bitlocker or the built-in-drive-encryption that my SSD offers?

Old question, but since then several new developments have been found concerning Bitlocker and drive encryption (used either alone or in combination), so I will turn couple of my comments on the page ...
DocWeird's user avatar
  • 1,294
11 votes

Passing luks passphrase to unlock encrypted rootfs with script instead of passing from the terminal

The previously answer by @Quanten is wrong. This should be enough echo "123" | cryptsetup luksOpen /dev/sda1 sda1 - A key-file is different from a password.
blanka_ramsay1's user avatar
9 votes

Windows 10 BitLocker on bootup presents just a blue screen but no password box or text.

The fix here worked for me: Open a CMD session as Admin Use the command bfsvc.exe %windir%\boot /v. After a restart, the texts should reappear. This fixed the issues for me.
ave's user avatar
  • 543
8 votes

Do TPM modules only work for motherboards of the same vendor?

I checked the motherboard user manuals of 4 vendors: Asus, MSI, Gigabyte, Asrock and they are not compatible with each other. As far as I can tell as of 2020 there is no standard TPM header so you ...
inf3rno's user avatar
  • 1,145
8 votes

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

The 5.1 kernel, current at the time I write this, has two different formats the for cipher string, the "old" format and the "new" format. Everything in this question so far, and apparently all docs ...
TrentP's user avatar
  • 191
8 votes

How to change pass phrase of full disk encryption?

Adding an answer that gives an actual working example. Firstly work out what the device name is: $ sudo blkid For example on an Ubuntu machine the Full Disk Encryption device can be found using this ...
htaccess's user avatar
  • 241
8 votes

Does Bitlocker allow you to restart your computer without entering a password?

You can suspend bitlocker for up to 15 Reboots at at time with Powershell. Start a Powershell Shell with Admin Privliges and enter Suspend-BitLocker -MountPoint "Drive" -RebootCount X Where Drive ...
architekt's user avatar
  • 182
8 votes

I turned off BitLocker encryption on my 5TB drive and now it continues to decrypt for days!

According to the FAQs, you should be fine to turn off your computer during the decryption process, including a power failure. What happens if the computer is turned off during encryption or ...
ajsmith's user avatar
  • 81
7 votes

Trying to delete directory with "rm -rf", but get message that it's not empty

The only solution that worked for me was from https://unix.stackexchange.com/questions/234876/unable-to-delete-a-file-whatever-i-do: Move them to /tmp and restart. The other options I tried were: ...
Joe's user avatar
  • 209
7 votes

How do I wipe an encrypted USB flash drive?

Since you're using Windows 10, you might be able to use DiskPart, depending on how the encryption works. If the flash drive doesn't even present the encrypted partition's storage space to the OS ...
Ben N's user avatar
  • 41.1k
6 votes

Suspending Bitlocker protection: how is the clear key "erased" afterwards?

The Bitlocker keys are stored in three locations, whose positions on the disk don’t change. Once the clear key is removed, the data set containing the remaining keys (recovery key, TPM, ...) is shrunk ...
Ro-ee's user avatar
  • 1,960
5 votes

How do I wipe an encrypted USB flash drive?

The thumb drive comes with an EXE program which I need to enter a password before the drive can be mounted. If it is just an .exe file that auto-runs on startup, just arrange a Linux PC (or ...
VIPER's user avatar
  • 59
5 votes
Accepted

Full drive encryption with Bitlocker freezes at 99.9%

I purchased a refurbished PC for the office that came with a 446GB SSD as the primary disk. I faced the same situation as the OP...the encryption stage would always get to 99.9% completion and go no ...
RSW's user avatar
  • 996
5 votes

How to mitigate any privacy-related risks associated with taking your laptop for repair?

You can use tools like Acronis True Image to create a complete backup of your HDD. The backup should be placed for example on the another HDD. Then, you can reset your laptop to the initial state or ...
Schullz's user avatar
  • 167
5 votes
Accepted

How can I decrypt a LUKS-encrypted ext4 drive by Windows based software?

If you are using LUKS, it can be accessed using LibreCrypt (a sequel to FreeOTFE). This will unlock the LUKS volume, but to make Windows understand ext4 you will still need an ext4 driver such as ...
grawity_u1686's user avatar
5 votes

Can I ever get my Data back?

This is too long for a comment. If the data is valuable, you should always backup up the data. Anyway...., you should be able to resume the process. Once the hard disk/partition is fully decrypted, ...
DxTx's user avatar
  • 1,206
5 votes
Accepted

Can someone steal hard drive contents by extracting the drive from inside computer?

Yes, absolutely. You could even do this by booting to a live-CD/USB version of linux and access the windows filesystem that way. The only thing the password does is prevent users of that operating ...
Blaine's user avatar
  • 1,697
5 votes

GRUB Bootloader with root LUKS encryption: Only grub shell

Finally it works (again): The cmd refreshgrub did the trick This command changed the content of the file /boot/efi/EFI/ubuntu/grub.cfg to: search.fs_uuid 2885-45AC root set prefix=($root)'/EFI/...
EccoB's user avatar
  • 151
5 votes

Is there any way to get the BitLocker password from the laptop?

Is there any way I can get the password? Probably not, most likely because there almost certainly isn't any password. Bitlocker doesn't require one, and it doesn't even make sense to create one ...
CBHacking's user avatar
  • 6,254
4 votes

Trying to delete directory with "rm -rf", but get message that it's not empty

Tried all of the answers here with no results. I was, however, able to move the directory aside using the mv command, which allowed me to continue.
Jeremy Ninnes's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible