cryptsetup-status - Linux


cryptsetup-status displays the status of a Linux Unified Key Setup (LUKS) encrypted device. It provides detailed information about encryption mappings, keyslots, and the overall state of the device.


cryptsetup-status [options] <device>


  • -v: Verbose Output – Displays additional details and status information.
  • -q: Quiet Output – Only prints errors and critical messages.
  • -c: Check Header – Checks the device header for consistency and validity.
  • -h: Print Help – Outputs the command usage syntax.
  • -s: Show Key Slots – Lists the available keyslots and their status.
  • -e: Exclude Headers – Skips displaying header information.
  • -l: Lock Status – Shows the lock status of the device, such as active, suspended, or unlocked.
  • -p: Password – Prompts for the device passphrase or key.


1. Display Status Information:

cryptsetup-status /dev/sda2

2. Show Keyslots:

cryptsetup-status -s /dev/sda2

3. Check Device Header:

cryptsetup-status -c /dev/sda2

Common Issues

  • Invalid Passphrase: If the provided passphrase is incorrect, cryptsetup-status will fail with an error. Double-check the passphrase or use the -p option to provide it interactively.
  • Device Not Found: Ensure that the specified device path is correct and that the device is properly connected and accessible.


cryptsetup-status can be combined with other commands to manage encrypted devices:

  • Encrypt a Device: cryptsetup luksFormat /dev/sda2
  • Open a Device: cryptsetup open /dev/sda2 my_decrypted_device
  • Close a Device: cryptsetup close my_decrypted_device

Related Commands