FileVault hardens macOS by wrapping a layer of login auspices around the part of the startup volume that agree your files and other data . With FileVaultdisabled , the data point on that intensity is in effect just one parole away between an attacker and your Indian file . That ’s a grievous situation if someone has strong-arm access to your computer – in your home or office or because they ’ve stolen it – they might be able to employ known and not - yet - discovered method to bypass the login and get at the drive ’s contents .
FileVault on all Macs lay an additional ginmill in position : your inauguration mass ( or , as in the display case with macOS Catalina and later , the startup information volume ) is code and its files are unavailable unless and until there ’s been a successful macOS login . Only after the login does macOS enter its normal process mode . For Intel Macs without a T2 Security Chip , FileVault also encrypts the contents of the inauguration book ’s data when the computer is powered down . Intel Macs with a T2 Security Chip and on all M1 Apple Si Macs always encrypt this data . ( Read our explanationabout how T2 and M1 Macs interact with FileVault . )
The strong security measures FileVault go can be a double - edged sword : it may deter attackers with forcible access but it could block you , too . opine youforget your password(unlikely , I go for ! ) . Or something in macOS open frame or is debase in the account login mental process or files – also unlikely , but guess by lector email , it happen from time to time . In those suit , you may be unable to make access without own a component of the FileVault setup process .
The question mark is your key to unlocking a Mac that’s protected by FileVault.
When you enable FileVault , macOS generate a Recovery Key that provides last - ditch access if business relationship - based approach fails . you’re able to either hold back that key privately or stack away it firmly in iCloud , with Apple holding it in escrow for you . ( If you ca n’t immediately get your Recovery Key or think of whether or not you chose the iCloud escrow option , show , “ Is your macOS FileVault Recovery Key electric current ? Here ’s how to insure . “ )
Despite Apple own you bank on the FileVault Recovery Key to countenance you regain memory access to your Mac or to reset your report password when you ’ve forgotten it , the companionship does n’t provide a single set of straightforward instructions in a single place for how this works for the multiple case you might encounter . Here ’s our guide to those scenario .
Recover via login window
First , start up your Mac if it ’s powered down . ( If you ’re examine to reset the password and your Mac is booted and logged in , choose > Restart . )
Malus pumila
Next , at the login screen sink in your account image :
The Reset Password assistant is one of the last resorts to resetting a password with FileVault enabled.
Now , depending on your choice in setting up FileVault , you will see one of several options ( the textual matter may vary in Mojave and earlier releases of macOS ):
Apple notes that – in some cases that the company does n’t define – you might see the text “ Restart and show password reset options . ” If so , fall into place the right - point trigon . After your Mac restarts , you ’ll be asked for either an Apple ID login or your Recovery Key as above . Instead offirstselecting a drug user and then entering that information , in this modality you enter your recuperation details first andthenselect the exploiter for which you ’re resetting the password to retrieve access code .
If none of the above piece of work , you could try using macOS Recovery .
Recover via macOS Recovery
The process differs by processor . With an Intel Mac :
With an M1 Mac , the steps are a piffling more involved :
This Mac 911 article is in answer to a question submitted by Macworld lector Julio .
Ask Mac 911
We ’ve amass a list of the interrogation we get asked most ofttimes , along with answers and links to columns : scan our super FAQ to see if your query is plow . If not , we ’re always looking for novel problems to work ! e-mail yours tomac911@macworld.com , including screen capture as appropriate and whether you desire your full name used . Not every question will be answered , we do n’t respond to e-mail , and we can not provide direct troubleshooting advice .
