Enhanced macOS Data Security: Enabling FileVault 2 Step-by-Step Guide

Owned by Preston Merkel
Last updated: Nov 20, 2024
3 min read

This comprehensive guide is specifically tailored for securing your personal home PC or Mac. It's essential to note that Seattle University's managed devices come equipped with state-of-the-art security measures pre-configured, ensuring an elevated level of protection by default.

FileVault 2 is a built-in disk encryption feature available on macOS, designed to secure the data on your Mac's startup disk. When enabled, it encrypts the entire disk, including the operating system and user data, protecting your information from unauthorized access. To enable FileVault 2 on your Mac, follow these steps:

Note: Before proceeding, make sure you have a backup of your important data. Enabling FileVault 2 without a backup can lead to data loss if something goes wrong during the encryption process.

If you lose both your password and recovery method, your data cannot be recovered.

Step-by-Step Guide to Enable FileVault 2:

  1. Open System Settings:

    1. Click the Apple menu () in the top-left corner of your screen.

    2. Select System Settings from the dropdown menu.

  2. Go to Privacy & Security:

    1. In the left-hand sidebar, scroll down and click Privacy & Security.

  3. Enable FileVault:

    1. Under the Privacy & Security section, locate the FileVault option.

    2. Click the Turn On button next to FileVault.

  4. Choose a Recovery Method:

    1. iCloud Account Recovery: Use your Apple ID to unlock the disk if you forget your password.

    2. Recovery Key: Generate a recovery key and save it somewhere secure. (You will need this key if you forget your password.)

  5. Authenticate:

    1. Enter your administrator password to confirm you want to enable FileVault.

  6. Restart and Begin Encryption:

    1. FileVault will ask you to restart your Mac. Click Restart Now.

    2. After restarting, encryption will begin. This process can take time, depending on the amount of data on your drive, but you can use your Mac while it encrypts.

  7. Check Encryption Progress:

    1. Return to System Settings > Privacy & Security > FileVault to see the encryption progress.

Important Notes:

  • Ensure your Mac is plugged in and has sufficient battery during the encryption process.

  • Save your recovery key in a secure location (e.g., password manager, physical safe) if you choose to generate one.

  • If you lose both your password and recovery method, your data cannot be recovered.

  1. Click on the Apple logo in the top-left corner of your screen.

  2. Select "System Preferences" from the drop-down menu.

  3. In the System Preferences window, click on "Security & Privacy."

  4. Go to the "FileVault" tab at the top of the Security & Privacy window.

  5. Click on the lock icon in the bottom-left corner of the window to make changes. You'll need to enter your administrator password.

  6. Once the lock is open, click on the "Turn On FileVault" button.

  7. You will be presented with two options to unlock your disk. Choose one of the following:

    a. Use your iCloud account: If you have an iCloud account set up on your Mac, you can use your iCloud password to unlock the disk. This is a convenient option, especially if you forget your login password. Make sure your Mac is connected to the internet during the encryption process.

    b. Use a recovery key: If you prefer not to use your iCloud account, you can create a recovery key. This key is a long alphanumeric code that you should keep in a safe place or store with Apple. It will be used to unlock your disk if you forget your login password.

  8. Follow the on-screen instructions to proceed with the encryption process.

  9. Depending on the size of your disk and the amount of data, the encryption process may take some time. Your Mac will be usable during this process, but the performance may be slightly affected.

  10. Once the encryption process is complete, restart your Mac to ensure FileVault 2 is fully enabled.