From b6abee4d6852f2b8b569228e45751e1ae8dc96b3 Mon Sep 17 00:00:00 2001 From: Thomas Waldmann Date: Fri, 22 Sep 2017 22:53:55 +0200 Subject: [PATCH] docs: change-passphrase only changes the passphrase, fixes #2990 (cherry picked from commit 713be765d1855adfd6dd2949324f5a2251c7f3c2) --- src/borg/archiver.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/borg/archiver.py b/src/borg/archiver.py index f6b177d36..9b67b99d8 100644 --- a/src/borg/archiver.py +++ b/src/borg/archiver.py @@ -2717,6 +2717,11 @@ class Archiver: change_passphrase_epilog = process_epilog(""" The key files used for repository encryption are optionally passphrase protected. This command can be used to change this passphrase. + + Please note that this command only changes the passphrase, but not any + secret protected by it (like e.g. encryption/MAC keys or chunker seed). + Thus, changing the passphrase after passphrase and borg key got compromised + does not protect future (nor past) backups to the same repository. """) subparser = key_parsers.add_parser('change-passphrase', parents=[common_parser], add_help=False, description=self.do_change_passphrase.__doc__,