# cryptsetup v2.8.1

- Product: cryptsetup (https://whatsnew.fyi/product/cryptsetup)
- Vendor: cryptsetup
- Date: 2025-08-19
- Version: v2.8.1
- Original notes: https://gitlab.com/cryptsetup/cryptsetup/-/tags/v2.8.1
- Permalink: https://whatsnew.fyi/product/cryptsetup/releases/v2.8.1
- Labels: Machine-generated from commit messages — the vendor published no release notes

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

Version 2.8.1.

- **fixed** — Fix bug in parsing of tcrypt device in crypt_init_by_name.
- **fixed** — Fix unlocking BitLocker with multibyte UTF8 characters in passphrase.
- **fixed** — Fix detecting status of chained modes in tcrypt.
- **fixed** — Fix luks2-external-tokens-path option for meson and define EXTERNAL_LUKS2_TOKENS_PATH for autoconf.
- **fixed** — Fix wrongly generated config.h paths and tmpfiles installation when $prefix is set.
- **changed** — Do not silently decrease PBKDF parallel cost (threads).
- **changed** — Weaken warning about /dev/urandom in man pages as recent kernels behave much better.
- **changed** — Documentation updates including clarification of --label, --sector-size, and --align-payload options, PBKDF hardcoded limits explanation, and removal of references to archeologic kernel versions.