---
name: "clevis-luks-pass"
section: "1"
platform: "linux"
package: "clevis"
version: "22-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/clevis-luks-pass"
---

# clevis-luks-pass(1)

Extracts the passphrase used for binding a particular slot in a LUKS device

## NAME

clevis-luks-pass - Extracts the passphrase used for binding a particular slot in a LUKS device

## SYNOPSIS

**clevis luks pass** -d DEV -s SLT

## OVERVIEW

The **clevis luks pass** command extracts the passphrase used for binding a particular slot in a LUKS device. For example:

```
clevis luks pass -d /dev/sda1 -s 1
```

## OPTIONS

• **-d** *DEV* : The LUKS device on which to extract a passphrase from

• **-s** *SLT* : The slot to use for extracting the passphrase

## EXAMPLE

```
clevis luks pass -d /dev/sda1 -s 1
<passphrase here>
```

Note that the output of **clevis luks pass** might be non-printable, in which case it would be better to redirect its output to a file and use it as a key file together with cryptsetup. For instance:

```
clevis luks pass -d /dev/sda1 -s 1 > slot1-passphrase
```

And the file slot1-passphrase will contain the passphrase associated with slot #1 in /dev/sda1.

## SEE ALSO

[**clevis-luks-unlock**(1)](/clevis-luks-unlock/1.md),