Enabling passphrase on an already existing private key
You could use the -p option to ssh-keygen:
ssh-keygen -p -f /path-to/key-file
It will prompt for old and new passphrase. It will also prompt for keyfile (with suggestion) if you do not provide -f key-file option.