Encrypt Mac disk with FileVault


Encrypt Mac disk with FileVault

There are several tools that allow you to encrypt files or folders. Want to encrypt a Mac drive? We’ll show you how to do that with the built-in FileVault system feature.

Apple has offered users the ability to encrypt data on a drive since Mac OS X Panther (10.3) with FileVault as standard. Although initially only data within your own user folder, FileVault 2 can encrypt the entire startup volume since Mac OS X Lion (10.7). Technically, FileVault 2 uses XTS-AES-128 encryption with a 256-bit key. The necessary information is obtained from a separate, unencrypted Apple_Boot volume.

In the course Secure with encryption you will learn a lot more about file encryption.

Enabling FileVault is not much. Go to System Preferences and open here Security and Privacy† Go to the tab FileVault, click on the lock at the bottom left if necessary and unlock it with your password. click on Enable FileVault†

You will now see two options. With the first option, My drive is allowed to be unlocked by my iCloud account, you can use your Apple ID and associated password as a backup to access the encrypted drive. If you’d rather not do this, choose Create a recovery code and don’t use my iCloud account, after which you enter a code of numbers and letters. Keep this code safe, preferably in an external and safe place.

If your Mac has multiple users, you must enter the password for each user in order for the encryption to take effect. Via the button Advanced additional options will appear, including Log out after inactive period of [x] minutes†

Your iCloud account as a backup? Or would you rather have your own recovery code?

Coding

The encryption will now start. This process can take quite a while, but luckily you can continue to use the Mac in the meantime. FileVault works nicely transparently, by the way, so that as a legitimate, logged in user you don’t really notice anything. In the worst case scenario, your system will now run a little slower, but your data is securely encrypted and therefore unusable for unauthorized persons.

You can also disable FileVault at any time. Go again to System Preferences / Security & Privacy / FileVault† Click on the padlock, log in as administrator and choose Disable FileVault† The decryption continues in the background while you continue to use the Mac.

You can unencrypt at any time.

Encrypt folders on Mac

To encrypt individual folders on a Mac, follow these steps. Open Disk Utility† You can usually find this via Programs / Utilities† Go to Archive / New Disk Image / Disk Image from Folder and indicate the folder you want to encrypt. Indicate under which name and where you want to save the folder.

Bee Coding you can choose between AES-128 or AES-256 encryption. The latter encrypts even more thoroughly, but also works a bit slower. Enter a strong password and click Keep† Your folder will now be created in the form of a dmg file, ie a disk image file. Confirm with Ready† The original folder can then be deleted.

When opening your dmg file, you will be asked for your password. It is preferable not to keep this in the keychain, otherwise fellow users may be able to access your folder.

Encrypted folders are stored in a protected disk image.
†

Recent Articles

Related Stories