Browse Source

docs: change-passphrase only changes the passphrase, fixes #2990

(cherry picked from commit 713be765d1855adfd6dd2949324f5a2251c7f3c2)
Thomas Waldmann 7 years ago
parent
commit
b6abee4d68
1 changed files with 5 additions and 0 deletions
  1. 5 0
      src/borg/archiver.py

+ 5 - 0
src/borg/archiver.py

@@ -2717,6 +2717,11 @@ class Archiver:
         change_passphrase_epilog = process_epilog("""
         change_passphrase_epilog = process_epilog("""
         The key files used for repository encryption are optionally passphrase
         The key files used for repository encryption are optionally passphrase
         protected. This command can be used to change this passphrase.
         protected. This command can be used to change this passphrase.
+
+        Please note that this command only changes the passphrase, but not any
+        secret protected by it (like e.g. encryption/MAC keys or chunker seed).
+        Thus, changing the passphrase after passphrase and borg key got compromised
+        does not protect future (nor past) backups to the same repository.
         """)
         """)
         subparser = key_parsers.add_parser('change-passphrase', parents=[common_parser], add_help=False,
         subparser = key_parsers.add_parser('change-passphrase', parents=[common_parser], add_help=False,
                                           description=self.do_change_passphrase.__doc__,
                                           description=self.do_change_passphrase.__doc__,