It seems that the vdc command is not very well documented.
FP2:/ # vdc cryptfs verifypw asdf
200 16036 1
If I try to check an existing password, I can enter any one, it always returns 200.
And without knowing it, it’s pretty risky to change a password like that.
FP2:/ # vdc cryptfs changepw password newpassword
The password change must be verifiable before restarting.
I am grateful for links to documentation or source code. I am also happy about feedback and experience.
That’s why I asked: strong passphrase to start the phone; simpler PIN to unlock for daily use. I know the SnoopSnitch app, but I don’t really trust it as it’s older.