Skip to content

FileVault

FileVault encrypts your entire startup disk using XTS-AES-128 encryption.

How to Enable

  1. System Settings > Privacy & Security > FileVault
  2. Click "Turn On"
  3. Choose recovery method: iCloud account or recovery key
  4. Encryption happens in the background while you use your Mac

What It Protects

  • If your Mac is stolen, the thief sees only encrypted data
  • Even removing the SSD and putting it in another computer won't work
  • Your data is only accessible after logging in with your password

Recovery Key

If you chose a recovery key instead of iCloud recovery, store it somewhere safe (password manager, printed in a secure location). If you forget your password AND lose the recovery key, your data is gone forever.