Encrypt existing SSH private key

ssh-keygen -p -f ~/.ssh/id_rsa

then you can enter your (new) passphrase for the private key. It does not change the private key but just set the passphrase.
You can use the same command to change the passphrase.