pam_ecryptfs man page

pam_ecryptfs — PAM module for eCryptfs


pam_ecryptfs.so [unwrap]


pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically mount a private cryptographic directory.


Use the login passphrase to unwrap an eCryptfs mount passphrase.

Module Services Provided

The services auth, and session are supported.


To unwrap a mount passphrase and automatically mount a private directory on login, add the following lines to


auth    required        pam_ecryptfs.so unwrap


session optional        pam_ecryptfs.so unwrap

See Also

ecryptfs(7), pam.conf(5), pam.d(8), pam(8)




This manpage was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

On Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

Referenced By

ecryptfs-setup-private(1), mount.ecryptfs_private(1), umount.ecryptfs_private(1).

Explore man page connections for pam_ecryptfs(8).

Linux-PAM Manual 2008-07-21