= cryptsetup-fvault2Dump(8)
:doctype: manpage
:manmanual: Maintenance Commands
:mansource: cryptsetup {release-version}
:man-linkstyle: pass:[blue R < >]
:COMMON_OPTIONS:
:ACTION_BITLKDUMP:

== Name

cryptsetup-fvault2Dump - dump the header information of a FVAULT2 (FileVault2 compatible) device

== SYNOPSIS

*cryptsetup _fvault2Dump_ [<options>] <device>*

== DESCRIPTION

Dump the header information of a FVAULT2 (FileVault2 compatible) device.

If the --dump-volume-key option is used, the FVAULT2 device volume key is dumped instead of header information.
You have to provide a password or keyfile to dump the volume key.

Beware that the volume key can be used to decrypt the data stored in the container without a passphrase.
This means that if the volume key is compromised, the whole device has to be erased to prevent further access.
Use this option carefully.

*<options>* can be [--dump-volume-key, --volume-key-file, --key-file, --keyfile-offset, --keyfile-size, --timeout].

include::man/common_options.adoc[]
include::man/common_footer.adoc[]