= cryptsetup-luksSuspend(8)
:doctype: manpage
:manmanual: Maintenance Commands
:mansource: cryptsetup {release-version}
:man-linkstyle: pass:[blue R < >]
:COMMON_OPTIONS:
:ACTION_LUKSSUSPEND:

== Name

cryptsetup-luksSuspend - suspends an active device and wipes the key

== SYNOPSIS

*cryptsetup _luksSuspend_ [<options>] <name>*

== DESCRIPTION

Suspends an active device (all IO operations will block and accesses to the device will wait indefinitely) and wipes the encryption key from kernel memory.

While the _luksSuspend_ operation wipes encryption keys from memory, it does not remove possible plaintext data in various caches or in-kernel metadata for mounted filesystems.

After this operation, you must use _luksResume_ to reinstate the encryption key and unblock the device or _close_ to remove the mapped device.

*WARNING:* To avoid deadlock, never suspend the device on which the cryptsetup binary resides.

*<options>* can be [--header, --disable-locks].

include::man/common_options.adoc[]
include::man/common_footer.adoc[]