@KazWolfe And if he doesn't give the password then he only loses what is in swap

Wrong.

LUKS is entire drive.

Cryptswap is different

I call bs :P

he can jump

You can't bypass LUKS full encryption passwords. If you do, the system won't be able to boot.

If you bypass cryptswap, you lose your swap (which happens on shutdown anyways)

so that means he can google "LUKS setup"

In fact, cryptswap by default just generates a random encryption password for your swapspace and stores it in memory. Upon shutdown, the encrypted key is destroyed and all the data in swap is useless.

For persistent swapping (suspend-to-disk), there needs to be a fixed password or some other safe way of storing passwords during sleep.

that's a Homer job to say

Simpson*

Either way, what OP is talking about is the full disk encryption set up, which uses LUKS and can not be ignored.

Yes, and I get he could use a Live session to set the LUKS right

He could use a live session, yes. He just needs to know his password.

He needs juice when he goes into login