Appearance
FileVault
FileVault encrypts your entire startup disk using XTS-AES-128 encryption.
How to Enable
- System Settings > Privacy & Security > FileVault
- Click "Turn On"
- Choose recovery method: iCloud account or recovery key
- Encryption happens in the background while you use your Mac
What It Protects
- If your Mac is stolen, the thief sees only encrypted data
- Even removing the SSD and putting it in another computer won't work
- Your data is only accessible after logging in with your password
Recovery Key
If you chose a recovery key instead of iCloud recovery, store it somewhere safe (password manager, printed in a secure location). If you forget your password AND lose the recovery key, your data is gone forever.