.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "ENCFSCTL 1"
.TH ENCFSCTL 1 2024-03-09 1.9.5 "Encrypted Filesystem"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
encfsctl \- administrative tool for working with EncFS filesystems
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBencfsctl\fR [\fIcommand\fR \fIcommand_args\fR]
.PP
\&\fBencfsctl\fR [info] \fIrootdir\fR
.PP
\&\fBencfsctl\fR passwd \fIrootdir\fR
.PP
\&\fBencfsctl\fR showcruft \fIrootdir\fR
.PP
\&\fBencfsctl\fR decode [\-\-extpass=prog] \fIrootdir\fR [encoded name ...]
.PP
\&\fBencfsctl\fR encode [\-\-extpass=prog] \fIrootdir\fR [plaintext name ...]
.PP
\&\fBencfsctl\fR cat [\-\-extpass=prog] [\-\-reverse] \fIrootdir\fR <(cipher|plain) filename>
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBencfsctl\fR is an administrative tool for working with EncFS filesystems.  It
is capable of changing the user supplied password, displaying basic information
about an encrypted volume, and other related operations.
.SH COMMANDS
.IX Header "COMMANDS"
.IP \fBinfo\fR 4
.IX Item "info"
Display basic information about the filesystem.  Takes a single argument,
\&\fIrootdir\fR, which is the root directory of the encrypted filesystem.  The
filesystem need not be mounted.  \fBInfo\fR is also the default command if only a
root directory is provided on the command line.
.IP \fBpasswd\fR 4
.IX Item "passwd"
Allows changing the password of the encrypted filesystem.  The user will be
prompted for the existing password and the new password.
.IP \fBshowcruft\fR 4
.IX Item "showcruft"
Recursively search through the entire volume and display all files which are
not decodable (only checks filename encoding, not block MAC headers).  This
might be useful for cleanup in case you've made use of features which create
files which are not decodable under the primary key.
.IP \fBdecode\fR 4
.IX Item "decode"
Allows you to specify an encoded name on the command line, and displays
decoded version.  This is mostly useful for debugging, as debug messages always
display encrypted filenames (to avoid leaking sensitive data through the debug
channels).  So this command provides a way to decode the filenames.
.Sp
The \fB\-\-extpass\fR option can be used to specify the program which returns the
password \- just like with encfs.
.Sp
If no names are specified on the command line, then a list of filenames will be
read from stdin and decoded.
.IP \fBencode\fR 4
.IX Item "encode"
Allows you to specify a filename on the command line, and displays its
encoded version. This is useful if e.g. you are taking a backup of an
encrypted directory and would like to exclude some files.
.Sp
The \fB\-\-extpass\fR option can be used to specify the program which returns the
password \- just like with encfs.
.Sp
If no names are specified on the command line, then a list of filenames
will be read from stdin and encoded.
.IP \fBcat\fR 4
.IX Item "cat"
Decodes and \fBcat\fRs the content of an encrypted file.  The filename can be
given in a plain or ciphered form.  With \fB\-\-reverse\fR The file content will
instead be encrypted.
.SH EXAMPLES
.IX Header "EXAMPLES"
Show information about an encrypted filesystem:
.PP
.Vb 1
\& % encfsctl info ~/.crypt
\&
\& Version 5 configuration; created by EncFS 1.1 (revision 20040504)
\& Filesystem cipher: "ssl/aes" , version 2:1:1
\& Filename encoding: "nameio/block" , version 3:0:1
\& Key Size: 192 bits
\& Block Size: 512 bytes
\& Each file contains 8 byte header with unique IV data.
\& Filesname encoded using IV chaining mode.
.Ve
.SH DISCLAIMER
.IX Header "DISCLAIMER"
This library is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.  Please refer to the "COPYING" file distributed with
\&\fBencfs\fR for complete details.
.SH AUTHORS
.IX Header "AUTHORS"
\&\fBEncFS\fR was written by \fBValient Gough <vgough@pobox.com>\fR.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fBencfs\fR\|(1)