CRYPTSETUP-LUKSUUID(8)

📦
version 2.8.8 · 17 versions
, in arch rolling, fedora 44, nixpkgs unstable

💖 CRYPTSETUP-LUKSUUID — the girlies' guide to LUKS UUIDs 💖

okay so bestie, this is the cryptsetup-luksUUID page from the cryptsetup maintenance commands (section 8, we love a numbered section ✨). It's literally just: peep your LUKS device's UUID, or swap it for a new one. Short page, big energy. Let's go 🫶

🌸 NAME 🌸

cryptsetup-luksUUID — print or set the UUID of a LUKS device

✨ SYNOPSIS ✨

cryptsetup luksUUID [<options>] <device>

🦋 DESCRIPTION 🦋

Prints the UUID of a LUKS device. That's the vibe. 👑

And if you hand it the --uuid option? It sets a brand new UUID instead. Glow-up for your metadata fr fr 💅

<options> can be [--header, --uuid, --type, --disable-locks].

🎀 OPTIONS 🎀

  • --batch-mode, -q — Suppresses all the confirmation questions. Use with care, bestie, I'm serious 😭

If the --verify-passphrase option isn't specified, this option also switches off the passphrase verification. So yeah, it's giving "no takebacks."

  • --debug or --debug-json — Runs in debug mode with full diagnostic logs. Debug output lines are always prefixed by #.

If --debug-json is used, additional LUKS2 JSON data structures get printed. Snack for the nerds 🍓

  • --disable-locks — Disables lock protection for metadata on disk. This option is valid only for LUKS2 and is ignored for other formats.
WARNING: do not use this option unless you run cryptsetup in a restricted environment where locking is impossible to perform (like when the /run directory cannot be used). No cap, just don't 🙈
  • --header <device or file storing the LUKS header> — Uses a detached (separated) metadata device or file where the LUKS header is stored. This option lets you keep the ciphertext and the LUKS header on different devices. Separation era 🧚

For commands that change the LUKS header (e.g., luksAddKey), specify the device or file with the LUKS header directly as the LUKS device.

  • --help, -? — Shows the help text and default parameters. Your little map 🗺️
  • --type type — Specifies the required device type. For more info, read the BASIC ACTIONS section in cryptsetup(8).
  • --usage — Shows short option help. The bite-sized version ✨
  • --uuid UUID — Uses the provided UUID for the luksFormat command instead of generating a new one. When used with the luksUUID command, it changes the existing UUID.

The UUID must be provided in the standard UUID format, e.g., 12345678-1234-1234-1234-123456789abc.

  • --version, -V — Shows the program version. Iconic behavior 👑

😭 REPORTING BUGS 😭

Report bugs at the cryptsetup mailing list <cryptsetup@lists.linux.dev> or in the Issues project section <https://gitlab.com/cryptsetup/cryptsetup/-/issues/new>.

Please attach the output of the failed command with the --debug option added. (Receipts, bestie. Always bring receipts 🧾)

🌈 SEE ALSO 🌈

Cryptsetup FAQ <https://gitlab.com/cryptsetup/cryptsetup/wikis/FrequentlyAskedQuestions>

cryptsetup(8), integritysetup(8) and veritysetup(8)

👑 CRYPTSETUP 👑

Part of the cryptsetup project <https://gitlab.com/cryptsetup/cryptsetup/>.

and that's the whole page, bestie, you ate that 💅✨ this lil manual is from cryptsetup 2.8.8, dated 2026-09-07 — go forth and luksUUID responsibly, mwah 🫶💖

📦 where this page comes from