pam_ecryptfs(8) Linux-PAM Manual pam_ecryptfs(8)

pam_ecryptfs - PAM module for eCryptfs [unwrap]

pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically mount a private cryptographic directory.

Use the login passphrase to unwrap an eCryptfs mount passphrase.

The services auth, and session are supported.

To unwrap a mount passphrase and automatically mount a private directory on login, add the following lines to


        auth    required unwrap


        session optional unwrap

ecryptfs(7), pam.conf(5), pam.d(8), pam(8)


This manpage was written by Dustin Kirkland <> for Ubuntu systems (but may be used by others). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

On Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.

2008-07-21 Linux-PAM Manual