FILEVAULT: What Is It & How Does It Work on Mac?

FILEVAULT
image source: vecstock

The importance of encryption is greater than ever in light of recent security and privacy infringements around the globe. The secrecy of the data on your laptop or smartphone is continuously in danger, whether it be from corporate espionage, police investigations, or hacking attempts by would-be identity thieves. Many users still opt not to encrypt, though. But in this post, I will expose you to the advantages of Filevault, its encryption on a Mac disk, how to turn it off and how to get its recovery key password.

Filevault

FileVault is the name of the encryption tool that only works on macOS devices. This automatically turns off when you buy a macOS computer for the first time. So you must make it active. Everything on your computer will be encrypted once you’ve completed this.

Why does this matter? It implies that the data on the hard drive is secure if the computer is off and the person attempting to log in doesn’t know your passcode or recovery key. The data would be jumbled and unintelligible if the hard drive were taken out of the machine.  You would need the system passcode or the recovery key to unlock the machine in order to decode it.

FileVault is an effective deterrent for anyone considering stealing your laptop, in addition to safeguarding your data from overzealous and overreaching government personnel. The hard disk is essentially unusable without the passcode or recovery key.

How To Switch FileVault On

It is simple to turn on FileVault. Just adhere to these guidelines. Keep in mind that in order for your laptop to function, it must be plugged into an outlet. If you disconnect it and use the computer’s battery, it will automatically pause.

  • Open System Preferences in MacOS.
  • Click on Security & Privacy. Click on FileVault once you’ve reached Security & Privacy. Click the padlock icon in the bottom left corner and then type your password.
  • To begin the process, click the button. The Turn On FileVault button will turn on once the password has been entered to open the padlock. Make sure your laptop’s charging cord is in it; otherwise, it won’t start charging. The process will then start after you click Turn on FileVault.
  • Establish a recovery key. Making a recovery key is the first step in the encryption process. You require your login password in order to view your computer’s data or turn encryption back on. The only other way to access your computer if you have forgotten your password is with a recovery key.
  • Instead, create a recovery key. Making a recovery key, printing it off, and hiding it somewhere is your best option. or jot it down in a notebook. Alternatively, take a screenshot and use VeraCrypt to encrypt it. The idea is to maintain personal control over your secondary source of security rather than entrusting it to a cloud provider. Click Continue now.
  • Now, the encryption process will start. After making sure the charging cord fits in, the encryption process will begin. It will say that it will take more than a day, but that’s not true. If you keep the computer on and plug it into power, it shouldn’t take more than a few hours.

Filevault Disk Encryption Mac

With FileVault, you can protect the files on your Mac. FileVault encrypts the data on your starting disk so that people who aren’t necessary can’t get to it. For those who have an iMac Pro or any other Mac with an Apple T2 Security Chip, the data on your drive is already safe. However, activating FileVault adds an extra layer of security by requiring your login password to decrypt your files.

As an administrator, you must install FileVault. When you turn on FileVault, you can choose how to get into your starting drive if you forget your password:

  • iCloud account and password: If you already use iCloud or intend to do so, this option is practical because it eliminates the need for a separate recovery key.
  • Recovery key: Keep a copy of the recovery key somewhere other than your encrypted starting drive. It is a unique set of letters and numbers that exists just for you. Make sure to replicate the letters and numbers exactly if you write the key down. Then place the key somewhere safe that you’ll remember, but not near your Mac, so you should be able to find it.

Remember to bring your recovery key. You won’t be able to log in and all of your files and settings will be permanently invalid if you enable FileVault, forget your login password, are unable to change it, and also forget your recovery key. Some heavily partitioned disk configurations, such as RAID disk sets, prohibit the usage of FileVault encryption.

It’s important to know that you can’t turn off FileVault on the Mac disk until the original encryption is complete. Encryption may take a while, depending on how much data you are maintaining on your computer. During that time, you can still use your computer normally. After the protection completes, you can turn off FileVault.

Filevault Recovery Key Password

You must input your account password to unlock the encrypted startup disk when FileVault is enabled in order to access your Mac. This is wonderful for preventing illegal access to your Mac’s data, but in the event that you forget your password or it suddenly stops working, you’ll need your FileVault recovery key to use your Mac. However, a lot of FileVault customers aren’t aware of where their recovery keys are or how to utilize them when they’re required. Here, we go into further detail about these problems.

What Does A FileVault Recovery Key Look Like?

The FileVault recovery key is a 24-character string, uniquely created for your Mac, that takes the form xxxx-xxxx-xxxx-xxxx-xxxx. It’s important to note that a Mac recovery key, a 28-character code required to reset your password or restore access to your Apple ID, is distinct from a FileVault recovery key.

How to Find FileVault Recovery Key?

When you enable FileVault encryption on your Mac, an automatic recovery key is generated, as shown by the message “A recovery key has been set.” The option you select when asked how you wish to unlock your starting disk if you forget your login password will, however, determine whether you can view the recovery key.

The recovery key is linked to your iCloud if you decide to let your iCloud account unlock your drive. But that doesn’t mean it’s stored there like a file, and you can access the FileVault recovery key by logging into your iCloud account. In actuality, your iCloud interface does not allow you to view it.

MacOS will generate a 24-character recovery key and advise you to back it up in a secure location if you decide to establish a recovery key instead of using the iCloud account. You must thus remember where you stored the FileVault recovery key in order to locate it. You might, for instance, have kept the key on your phone’s notes app or in a file on your Mac, external drive, or other device.

How To Recover FileVault Key on Mac:

  • From the Applications > Utilities folder, launch Terminal.
  • To stop FileVault, enter the following command and press Enter.
  • Enter your admin password after you’ve typed it.
  • Await the conclusion of the decryption.
  • Reactivate FileVault by typing the following command and pressing Enter.
  • Press Enter after entering the admin password.
  • Enter the name of the account whose FileVault you want to enable.
  • Enter the password for your account.

When the FileVault disk encryption is enabled, Terminal will return the FileVault recovery key.

How to Use FileVault Recovery Key?

The only time the FileVault recovery key will be required is when you change the login password for your account. Make careful you enter the entire key with the hyphens if this occurs. Try restarting your Mac and going through the password resetting process again if you discover that the FileVault recovery key is not working.

How to Check if Your FileVault Recovery Key is Still Valid?

Every time you turn off and on FileVault disk encryption, you’ll receive a new recovery key. If you have switched to a new Mac, the new Mac will have a different recovery key if it is FileVault encrypted. If you have more than one recovery key stored, you may want to know which one is correct for your present Mac.

Here’s a quick method to check:

  • From the Applications > Utilities folder, launch Terminal.
  • Press Enter after pasting the following command into Terminal.
  • After entering your admin password, press Enter.
  • Press Enter after entering or pasting your FileVault recovery key.
  • If the recovery key is for your Mac, you’ll see true; otherwise, you’ll see false.

Keep in mind that since you won’t be able to see the recovery key as you input or paste it, mistakes may occur. So give it a couple more tries.

Turn Off Filevault

Although FileVault is highly advised for securing your Mac from prying eyes, you might need to deactivate it occasionally to resolve a problem or carry out specific operations. Here are two methods to disable FileVault on Mac if you have made the decision to do so during a standard boot. Either by making changes to System Preferences/Settings or by executing a command in Terminal, you can disable FileVault. It’s important to note that while you wait for the disk to be decrypted, you can still use your Mac.

How to Turn Off FileVault on Mac? (The Usual Way)

With macOS Monterey or before, disable FileVault:

  • Go to System Preferences under the Apple menu.
  • Select “Security & Privacy” from the menu.
  • “FileVault” tab should be selected.
  • Enter your admin user name and password by tapping the bottom-left lock, then click “Unlock.”
  • To stop FileVault, select “Turn Off FileVault.”
  • Simply select “Turn Off Encryption.”

How to Disable FileVault on Mac Using Terminal?

Using Terminal, follow these steps to disable FileVault on a Mac:

  • Open Terminal by selecting it in the Applications > Utilities menu.
  • Enter the following command into Terminal by copying and pasting it there.
  • Hit Enter after entering your admin login password. (When entering the password in Terminal, it won’t be shown.)
  • Enter after entering your user name.
  • Enter your password after entering it.

What Are the Disadvantages of Filevault on Mac?

The main drawbacks are that if FileVault is enabled, you cannot disable automatic device locking and that the background encryption operation may use a small amount of CPU power.

How Long Does Filevault Encryption Take?

Encrypting your drive with FileVault can take some time, especially if you have 1TB of data. The duration of this process taking more than a single day is entirely normal.

Does Filevault Take up Space on Mac?

It does not occupy any filesystem space, sure.

References 

0 Shares:
Leave a Reply

Your email address will not be published. Required fields are marked *

You May Also Like