Comment by IshKebab

Or in other words, you should derive the disk’s encryption key from the user’s login password?