How to convert existing instalation from LUKS1 to LUKS2

I have LUKS1 encrypted disk on laptop. Fedora upgraded several times so encryption created with an older fedora version which used LUKS1 at the time. I want to avoid fresh installation only for LUKS2 sake and is also time consuming restoring from backup. So is it possible to convert offline with a live cd for example? And how?

I am in the same boat, I upgraded my Fedora desktop for more than 10 releases without reinstalling and I have a bunch of old, luks-encrypted external disks. All devices were still using luks1.

I followed the steps in Captcha Check and all went fine on all disks. I did not have to do this from a live environment.

To be safe, make a backup of the of luks1 header (on a USB thumb drive), so you can go back if something goes wrong.


Trying to do the same while laptop running (not live).
I get this message:
Cannot convert device /dev/sda3 which is still in use.

1 Like

I thought I had done it online, but that seems to be wrong memory.

Just boot a live image and perform the steps

1 Like