Filevault For Mac

  1. Should I Use Filevault For Mac
  2. Should I Use Filevault For Mac

Once the encryption process is complete, you can turn off FileVault. If you have an iMac Pro or another Mac with an Apple T2 chip, data on your drive is already encrypted automatically, so turning on FileVault won’t take the same amount of time.

  1. Nov 30, 2018 Learn how to create and deploy a FileVault recovery key for Mac computers in your company, school, or other institution. If you're using FileVault in Mac OS X Snow Leopard, you can upgrade to FileVault 2 by upgrading to OS X Lion or later. After upgrading OS X, open FileVault preferences and follow the onscreen instructions to upgrade FileVault.
  2. Dec 26, 2017 What is FileVault. FileVault is Apple's implementation of encrypting your data on macOS and Mac hardware. It will encrypt all of your data on your startup disk (although you can also encrypt your Time Machine backups as well) and once enabled, it will encrypt your data on the fly and will work seamlessly in the background.

FileVault is one of those Mac features that you know is there but are never really sure what it’s there for. Apple has never really made a big song and dance about how the feature protects your data or why you should bother with it, so we’re going to do it instead.

This won’t be a literal song and dance, unfortunately, (we don’t have the natural rhythm) but we will tell you all you need to know about FileVault, as well as how and why you should use it. But feel free to sing the words as you read them and dance along at the same time.

Filevault for macos

Okay, let’s get into it.

What is FileVault?

FileVault is macOS’s built-in disk encryption feature. It's designed to encrypt your Mac's hard drive and all of the files located on the drive using 128-bit AES encryption with a 256-bit key.

Once FileVault is enabled on your Mac, all existing data will be encrypted. From then on, any new and changed data will be automatically locked down and password protected on boot to prevent unauthorized access.

FileVault was originally introduced to Mac back in 2003 on OS X 10.3 Panther. But to say it wasn’t very good would be an understatement. It was terrible. The functionality was poor, the implementation was shoddy, and only the home directory could be encrypted.

Thankfully, 2003 was a long time ago and now, with FileVault 2, you can expect full-disk encryption and the ability to use the Find My Mac feature to wipe your drive remotely if ever your system falls into suspect hands.

Should I use FileVault?

Yes, is the short answer.

Mac

If you’re concerned about the privacy of your files and user data, and your computer contains information that shouldn’t be seen without authorized access, you should absolutely use FileVault disk encryption.

The feature is particularly good if you’re a MacBook user that regularly takes your laptop on the move where there’s a greater chance of it becoming lost or misplaced.

Should I Use Filevault For Mac

FileVault offers peace of mind and that counts for a lot. There are, however, reasons why you might not want to bother with the feature.

First of all, FileVault enforces a password. If you struggle to remember passwords (it’s well worth using a password manager if you do) or prefer using your Mac without one, you might consider FileVault to be more effort than it’s worth.

Secondly, FileVault encryption is backed into the CPU which can affect performance. If you own a newer SSD-equipped Mac you’re unlikely to notice the difference, but in older Macs with HDDs performance can take a significant hit — enough for you to consider using your computer without encryption.

How to check if FileVault is enabled?

In systems running OS X Yosemite 10.10 and newer, Apple encourages you to turn on FileVault 2 during setup. So, if you’re using a newer Mac, there’s every chance that your files are already being encrypted.

Here’s how to check:

  1. Click on the Apple menu and select System Preferences.
  2. Select Privacy & Security.
  3. Click on the FileVault tab and the status will be displayed.

Before you turn on FileVault, be aware that the initial encryption process can take hours. However, it does run in the background so you can continue using your Mac as normal, albeit not at peak levels of performance.

Also, FileVault encrypts the entire disk. Any additional users will need to be enabled so that they can unlock the disk by entering their password.

How to turn on FileVault disk encryption

  1. Click on the Apple menu and select System Preferences.
  2. Select Privacy & Security.
  3. Click on the FileVault tab, then click the lock in the bottom left corner of the window.
  4. Enter your administrator name and password and click Unlock.
  5. Click Turn On FileVault.
  6. Choose whether you want to link your iCloud account to FileVault to unlock the disk and reset your password or create a recovery key and click Continue.
  7. Click Restart to reboot your Mac and begin the encryption process.

Choosing a FileVault Recovery Key

The FileVault recovery key deserves special mention here. If you choose this option over linking your iCloud account, it’s critical that you make a note of the recovery key and keep it in a safe place that’s not on your hard drive. Losing the recovery key makes your data unrecoverable so it’s worth writing it down and storing it in a safe place, as well as entering it into a password manager.

How do I turn off FileVault?

Once your disk has been encrypted you can turn off FileVault at any time. You might decide to do this if you find that the feature is too resource-heavy or this particular level of security isn’t for you.

  1. Click on the Apple menu and select System Preferences.
  2. Select Privacy & Security.
  3. Click on the FileVault tab, then click the lock in the bottom left corner of the window.
  4. Enter your administrator name and password.
  5. Click Turn Off FileVault.

Disabling FileVault starts the process of decrypting all of your files. This runs in the background but, like encryption, is a lengthy process.

How do I keep online and offline activity private?

FileVault’s capabilities only extend as far as user data and file encryption. Other things you do on your Mac like web browsing, chatting via messaging apps, downloading software, and using files locally are not private.

Of course, in the event that your Mac is lost, for anyone to see your online and local activity they’d need to enter the admin password first. But if you share computer access and want to keep your activity private, the best option is to use an app like CleanMyMac X.

The latest edition of MacPaw’s leading utility tool comes with a Privacy feature that lets you wipe off all unwanted traces and any information that may compromise your privacy. All you need to do is choose a suitable period and let CleanMyMac X take care of the rest. While it’s possible to delete browsing history, remove downloads, and clear cookies manually, this tool lets you take care of everything at once so you don’t need to worry about it.

Protect your data, maintain your privacy

If there’s anything on your computer that you prefer to keep to yourself, you can safeguard your information in two simple ways:

1. Enable FileVault so that all of your user data and files are kept under lock and key.

2. Download CleanMyMac X to keep all online and local activity private.

In a world where computer viruses and data theft is rife, privacy and security should be your top priority. These tools will make sure your information is never compromised.

CleanMyMac X is the biggest and best Mac utility tool on the market, designed to clean, protect, and optimize your system for outstanding performance. Download the app today.

These might also interest you:

Turn on and set up FileVault

FileVault 2 is available in OS X Lion or later. When FileVault is turned on, your Mac always requires that you log in with your account password.

  1. Choose Apple menu () > System Preferences, then click Security & Privacy.
  2. Click the FileVault tab.
  3. Click , then enter an administrator name and password.
  4. Click Turn On FileVault.

If other users have accounts on your Mac, you might see a message that each user must type in their password before they will be able to unlock the disk. For each user, click the Enable User button and enter the user's password. User accounts that you add after turning on FileVault are automatically enabled.

Choose how you want to be able to unlock your disk and reset your password, in case you ever forget your password:

  • If you're using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password.*
  • If you're using OS X Mavericks, you can choose to store a FileVault recovery key with Apple by providing the questions and answers to three security questions. Choose answers that you're sure to remember.*
  • If you don't want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk.

If you lose both your account password and your FileVault recovery key, you won't be able to log in to your Mac or access the data on your startup disk.

Encryption occurs in the background as you use your Mac, and only while your Mac is awake and plugged in to AC power. You can check progress in the FileVault section of Security & Privacy preferences. Any new files that you create are automatically encrypted as they are saved to your startup disk.

When FileVault setup is complete and you restart your Mac, you will use your account password to unlock your disk and allow your Mac to finish starting up. FileVault requires that you log in every time your Mac starts up, and no account is permitted to log in automatically.

Reset your password or change your FileVault recovery key

If you forget your account password or it doesn't work, you might be able to reset your password.

If you want to change the recovery key used to encrypt your startup disk, turn off FileVault in Security & Privacy preferences. You can then turn it on again to generate a new key and disable all older keys.

Turn off FileVault

If you no longer want to encrypt your startup disk, you can turn off FileVault:

  1. Choose Apple menu > System Preferences, then click Security & Privacy.
  2. Click the FileVault tab.
  3. Click , then enter an administrator name and password.
  4. Click Turn Off FileVault.

Decryption occurs in the background as you use your Mac, and only while your Mac is awake and plugged in to AC power. You can check progress in the FileVault section of Security & Privacy preferences.

Learn more

Should I Use Filevault For Mac

  • Learn how to create and deploy a FileVault recovery key for Mac computers in your company, school, or other institution.
  • If you're using FileVault in Mac OS X Snow Leopard, you can upgrade to FileVault 2 by upgrading to OS X Lion or later. After upgrading OS X, open FileVault preferences and follow the onscreen instructions to upgrade FileVault.
  • RAID partitions or non-standard Boot Camp partitions on the startup drive might prevent OS X from installing a local Recovery System. Without a Recovery System, FileVault won't encrypt your startup drive. Learn more.

* If you store your recovery key with Apple or your iCloud account, there's no guarantee that Apple will be able to give you the key if you lose or forget it. Not all languages and regions are serviced by AppleCare or iCloud, and not all AppleCare-serviced regions offer support in every language. If you set up your Mac for a language that AppleCare doesn't support, then turn on FileVault and store your key with Apple (OS X Mavericks only), your security questions and answers could be in a language that AppleCare doesn't support.