pam_ecryptfs(8)

pam_ecryptfs8

Pam module for ecryptfs

Usage

pam_ecryptfs.so [unwrap]

Overview

pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically mount a private cryptographic directory.

Options

unwrap

Use the login passphrase to unwrap an eCryptfs mount passphrase.

The services auth, and session are supported.

Module services provided

Examples

To unwrap a mount passphrase and automatically mount a private directory on login, add the following lines to

/etc/pam.d/common-auth:

        auth    required        pam_ecryptfs.so unwrap

/etc/pam.d/common-session:

        session optional        pam_ecryptfs.so unwrap

Releases

9 releases since Debian 5.0 (Lenny); the text changed 2 times.

  1. 5.0–6.0
  2. 7
  3. 8–Arch

Author

This manpage was written by Dustin Kirkland <[email protected]> for Ubuntu systems (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

On Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

From ecryptfs-utils 111-9 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.