en	If you don't, the previous LUKS1 data might still be written in some recovery data on the USB stick and could be recovered using advanced data forensics techniques.

en	Follow our instructions on [[changing the passphrase of an existing encrypted partition|doc/encryption_and_privacy/encrypted_volumes#changing]].

en	Follow our instructions on [[creating and using LUKS encrypted volumes|doc/encryption_and_privacy/encrypted_volumes]].

en	We also recommend you destroy your old device (or at least [[securely delete the entire device|doc/encryption_and_privacy/secure_deletion#device]]).

en	If you don't, the previous LUKS1 data might still be written in some recovery data on the USB stick and could be recovered using advanced data forensics techniques.

en	[[!toggle id="5_ps_passphrase" text="Display the instructions to change the passphrase of your Persistent Storage."]]

en	If you created your encrypted volume with Tails 5.12 or earlier and are worried about a very powerful adversary, consider migrating your entire Tails to a different USB stick and destroying your old Tails USB stick (or at least [[securely deleting the entire device|doc/encryption_and_privacy/secure_deletion#device]]).

en	If you created your backup Tails with Tails 5.12 or earlier and are worried about a very powerful adversary, consider creating your new backup Tails on a different USB stick and destroying your old backup Tails (or at least [[securely deleting the entire device|doc/encryption_and_privacy/secure_deletion#device]]).

en	[[!toggle id="5_backup_tails_installer" text="Display the instructions to update your backup or create a new backup."]]

en	If you create your encrypted volume with Tails 5.12 or earlier and your encrypted volume is on a USB stick (or an SSD) or if you are not comfortable with the command line:

en	Follow our instructions on [[creating and using LUKS encrypted volumes|doc/encryption_and_privacy/encrypted_volumes]].

en	[[!toggle id="6_other_cryptsetup_partition" text="Display the instructions to identify the partition name using the command line."]]

en	[[!toggleable id="6_other_cryptsetup_partition" text="""

en	Upgrade to LUKS2.

en	[[!toggle id="6_other_cryptsetup_upgrade" text="Display the instructions to upgrade to LUKS2 using the command line."]]

en	[[!toggleable id="6_other_cryptsetup_upgrade" text="""

en	Knowing which version of LUKS is used in your devices

en	If you know how to use the command line, you can verify whether your encryption uses PBKDF2 or Argon2id.

en	Your Persistent Storage appears as `TailsData_unlocked`.

en	Take note of the *partition name* of your Persistent Storage, which appears above `TailsData_unlocked`. In this example, the Persistent Storage is in the partition sda2. Yours might be different.

en	Replace [partition] with the partition name found in step 4.

en	sudo cryptsetup luksDump /dev/[partition]

en	`PBKDF` indicates the key derivation function, either `pbkdf2` or `rgon2id`.

en	Replace [partition] with the partition name found in step 6.