pam_ecryptfs - Man Page

PAM module for eCryptfs

Synopsis [unwrap]


pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically mount a private cryptographic directory.



Use the login passphrase to unwrap an eCryptfs mount passphrase.

Module Services Provided

The services auth, and session are supported.


To unwrap a mount passphrase and automatically mount a private directory on login, add the following lines to


        auth    required unwrap


        session optional unwrap

See Also

ecryptfs(7), pam.conf(5), pam.d(8), pam(8)



This manpage was written by Dustin Kirkland <> for Ubuntu systems (but may be used by others).  Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

On Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

Referenced By

ecryptfs-setup-private(1), mount.ecryptfs_private(1), umount.ecryptfs_private(1).

2008-07-21 Linux-PAM Manual