What is the procedure for recovering encrypted data?
To be able to recover encrypted data later (in case user forgets password) you need: 1. Create encrypted volume with some password known to admin or without password at all. 2. Make a copy of volume’s .key file and store it in a safe place. 3. Let the user change volume password to whatever he or she likes. If user forgets password, use this procedure to access data: 1. Copy saved .key file over the one user has. 2. Use admin password (which could be no password at all) to mount encrypted volume. If no .key file copy with a known password is saved, there will be no way to recover the data. The security requirements prohibit magic solutions like “super passwords” because they could easily be used to circumvent the encryption.
