You are not logged in.

#1 2026-09-01 21:19:16

LichenEater
Member
Registered: 2026-08-22
Posts: 7

GRUB can't decrypt encrypted partition (3 errors)

I recently did an install of Arch Linux with full disk encryption, including /boot ( https://wiki.archlinux.org/title/Dm-cry … ion_(GRUB) ). I managed to get into GRUB, where it prompts me to enter the passphrase for my LUKS partition. I have checked and the UUID is correct and matching.

When I enter my passphrase for my encrypted partition in GRUB, it says attempting to decrypt master key, after which I enter the passphrase (which does work in the Arch Install ISO, when I do cryptsetup open, but not here for some reason). I am returned with invalid passphrase, and after 3 attempts, it returns the following errors:

error: disk/luks2.c: luks2_recover_key:800:Invalid passphrase.
error: disk/cryptodisk.c:__grub_cmd_cryptomount:1575:no such cryptodisk found. perhaps a needed disk or cryptodisk module is not loaded.
error: kern/disk.c:grub_disk_open:240:disk 'lvmid/[censored out]' not found.

Then it enters the rescue mode. I have already tried to append --modules="part_gpt part_msdos" to the end of my grub-install command and then remaking the GRUB configuration as recommended in the GRUB encrypted /boot guide for cryptodisk errors. My GRUB config file and mkinitcpio also seem to be properly configured. Does anyone have experience with this issue or how to solve it? I don't believe it to be a keymap issue as typing the symbols in GRUB rescue returns the same symbols (I am on default US keyboard). The version of GRUB I'm on also has support for Argon2id decryption, so it can't be that either. This install is a UEFI install, for context (I also mounted the EFI partition to /mnt/efi beforehand).

Last edited by LichenEater (2026-09-01 21:30:37)

Offline

#2 2026-09-02 04:15:38

pgreenlight
Member
Registered: 2026-09-02
Posts: 2

Re: GRUB can't decrypt encrypted partition (3 errors)

Hey!
If encryption matters to u a lot and u want to do it
send me output of this
```bash
    grub-install --version
    cryptsetup luksDump /(ur encrypted boot partion name)/nvme0n1pX
```
but let me be honest with u encrypting is not an actual thing for a single user desktop it's for servers and high valuable data storages
so be chill about it
and u also could do hardening without this

Last edited by pgreenlight (2026-09-02 04:25:04)

Offline

Board footer

Powered by FluxBB