Unable to decrypt dataset

[SnowReborn]

I was gonna go down the exact same path using bitwarden randomly generated passphrase and store in bitwarden, and after a very long contemplation, i ended up using my secondary master password for my super important account instead, fingers crossed.

[SnowReborn]

@Austin101

a fact I have had to decrypt this pool with the passphrase stored in the password manager in the past, my best guess is that I accidentally over wrote the passphrase stored in the password manager at some point. I h

i don’t know if that makes me feel better knowing it’s not TrueNas’s issue. I was really afraid because I just ingested 80TB of fresh data and all encrypted using passphrase LOL.

[Austin101]

It generally makes me feel better to have an explanation that makes sense. That way I can take steps to avoid this in the future.

[Austin101]

This is for a group of people, so we kind of needed something with the ability to share passwords that multiple people needed to know. Bitwarden is open source, has had a security audit, and the cost was reasonable. Knowing now that the password history feature may not always work kind of sucks, but I didn’t even know that was a feature until recently. So not the end of the world.

[Stux]

Backup encryption passkeys 3:2:1, Just like the data.

In all seriousness print them out and file them.

In my passkey tracker thing I actually keep a secure note, because I’ve been bitten by their propensity to replace passwords/keys.

And it’s the same reason I don’t use dataset encryption. I figure the only person who’s getting locked out is me.

[Austin101]

Given that nothing really needs encryption that we use, I will probably not be encrypting things going forward. If the need comes up I will make a special dataset just for that. I will also be keeping the passphrases in a second location going forward, if I end up needing to do that.

[winnielinnie]

Hate to “rub it in”, but was this a randomly generated passphrase, or was it one of your own cognition?

Because all passphrases I use, I memorize. (I don’t really need a password manager, but it’s nice to have.)

I’m against “super secure randomly generated passphrases”, since they do not have personal meaning to you. Hence, you need to rely on a password manager or auto-fill.

Here’s an example of what one of my passwords might be:
Alice dove through the rabbit hole 13 times!

I easily memorize that and can type it in as if I’m writing a normal sentence, but it’s a very strong passphrase. (I’m not bound to a password manager, since the passphrase was my own creation with personal meaning.)

[Austin101]

I believe it was a sentence, as that is how I normally do it. I should have memorized it, but I did not. I have to store it somewhere as other people may need access to it, since this is used for a team not just me.

[winnielinnie]

@Austin101

I have to store it somewhere

This solves everything:

zfs create mypool/the-password-for-this-encrypted-dataset-is_IHave22PetRabbitsInMyHouse

[chuck32]

@Austin101

Bitwarden has a password history (Which I learned about approximately 5 minutes ago). Unfortunately it shows no history, even though it does show a date modified.

When you use the app (don’t know how it is displayed in the web GUI) you can click on the number of the password history to see the older passwords.