More tl;dr: rewrap passphrase to upgrade the file format to v2 with random salt:<p><pre><code>    ecryptfs-rewrap-passphrase ~&#x2F;.ecryptfs&#x2F;wrapped-passphrase

</code></pre>
[1] <a href="https:&#x2F;&#x2F;medium.com&#x2F;@2bluesc&#x2F;rewrapping-ecryptfs-passphrase-to-protect-against-cve-2014-9687-60c9a2bb88a2" rel="nofollow">https:&#x2F;&#x2F;medium.com&#x2F;@2bluesc&#x2F;rewrapping-ecryptfs-passphrase-t...</a>