Security

Passwords

By default, the Librem 5 uses the password 123456 for the:

  • Disk encryption password (used to unlock the data on the phone)

  • Lock screen PIN

  • User password

Encryption

To update the encryption password, open Disks and select the top device:

../../../_images/disks_top_dev.png

Then select the 31 GB LUKS partition. Under settings, tap Change Passphrase…

../../../_images/change_passphrase.png

Make sure to set a strong password. The default password is documented here. Your password may include numbers, symbols, and a mix of upper and lower-case characters. It is good practice to back up this password as it will be needed every time you start your phone.

Lock screen/Admin

See Changing the Settings for full steps to update the lock screen/user password. Quick setup under: Settings → Details → Users → Password

GNOME Keyring

The last password you’ll need to set up is for Gnome Keyring.

../../../_images/gnome_keyring.png

This is where user account data is stored. All credentials are encrypted at rest. When attaching to a service like Nextcloud, you will automatically be prompted to create the new keyring. SImilar to your main encryption password, it is good practice to record these in a secure password manager. If you do not already use a password manager, passwordsafe is simple to use and in our software store.

Meltdown/Spectre vulnerability

The Librem 5 and Liberty phones are not vulnerable to Meltdown or Spectre as they are based on an i.MX 8M chipset.