Manually zeroizing old data

for each partition where you are not preserving existing data (where encrypted preserve=n ) and which previously held sensitive data, you should wipe the partition before encrypting it otherwise, some blocks might not be overwritten with encrypted data immediately and could be recovered use the umount and wipefs commands to unmount and zeroize $ umount \<partition name> $ wipefs \<partition name> $ cat /dev/zero > \<partition name> for example, to zeroize partition /dev/sdb $ umount /dev/sdb $ wipefs /dev/sdb $ cat /dev/zero > /dev/sdb