5

At the moment cryptsetup luks preboot password entry prompt shows not even asterisk symbols while typing. Password entry is functional though. But this is too difficult for some users.

How to make cryptsetup luks preboot password entry prompt at least show asterisk while typing?

Is it possible to make cryptsetup luks preboot password entry prompt show the real password letters as it is being entered? (Similar to web forms "show password" boxes.)

4
  • 1
    What Linux distribution? Apr 25 at 6:47
  • There's a debian manual page which suggests that it uses a helper program called askpass. Not sure how debian specific this is. Your solution will, most likely, involve either configuring this askpass program or replacing it entirely. configuration or replacement would need to be done in initramfs. cryptsetup-team.pages.debian.net/cryptsetup/… Apr 25 at 10:15
  • This is by design AFAIK. Leaking the length of the passphrase onto the screen can make it easier for crackers to narrow down the search space when brute forcing.
    – Marcel
    Apr 25 at 13:41
  • 1
    @Marcel the behaviour is by design but it's not ubiquitous. For example the default behaviour for Ubuntu desktop shows a dot per character. It's not a particularly large security risk as long as the password itself is long enough and obscure enough to be cryptographically secure. Apr 25 at 15:17

1 Answer 1

0

You can see the discussion about your exact same issue here, and as I've mentioned in the comments, it's a feature. Although someone managed to achieve what you're seeking to achieve, it's not supposed to.

It seems though you can see them asterisks if you install plymouth.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.