If encrypted volumes are detected, the utility will prompt you to select an operation mode. You can choose to set a Unified Passphrase for all volumes, or set Individual Passphrases for each volume separately.
Mode A: Unified passphrase (same for all devices)
This is the recommended mode for most deployments, as synchronizing passphrases across all encrypted devices (/dev/sda3 - /dev/sda4) simplifies the boot process and key management.
When prompted, confirm that you wish to use the same passphrase for all volumes.
Enter the current passphrase: Type the current passphrase used by your primary volume. The tool will verify this against the active LUKS headers.
Review Matching Volumes: The utility will display a list of all volumes currently utilizing the provided passphrase.
Enter the new passphrase: You will be prompted to enter and confirm your new, secure passphrase.
Handling Mismatched Volumes: If the script detects encrypted volumes that use a different passphrase, it will pause and list those specific volumes. It will then prompt you to "Enter current disk encryption passphrase:" for that specific volume to authorize updating it to your newly unified passphrase.
Mode B: Individual passphrases (per-device mode)
If your Company security policies mandate separate keys for different partitions, opt out of the unified mode.
Decline the prompt to use the same passphrase for all volumes.
The script will sequentially target each detected LUKS device.
For every device, you will be prompted to enter its current passphrase followed by the desired new passphrase.
This cycle repeats until all volumes have been successfully updated.
