Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Ecryptfs encrypts filenames and sometimes I need to find particular file, so I would like a tool to map the encrypted filenames back to their plaintext file name.

share|improve this question

migrated from security.stackexchange.com Feb 23 '12 at 21:21

This question came from our site for information security professionals.

As of ecryptfs-utils version 96, ecryptfs-find is the best way to go from an encrypted path to a non-encrypted path. It meets the needs of most users that need to map between filenames, but there are some things to note about the tool:

  1. It doesn't decrypt filenames. It maps the filenames based on the inode number corresponding to a file.
  2. You must have a live eCryptfs mount. "Offline" mapping of filenames is not possible with ecryptfs-find.
  3. ecryptfs-find may return multiple results and only one of them will be the actual decrypted version of the path you're looking for. If an inode has multiple hard links, paths to each hard link will be printed.
share|improve this answer
up vote 4 down vote accepted

You would want to use the utility ecryptfs-find

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.