🔐 FileVault Full Disk Encryption
Protect Your Data at Rest
Enable FileVault to encrypt everything on your Mac’s internal drive. This protects your data if your device is lost, stolen, or seized, and helps prevent offline attacks against your files.
🧠 Read This First: Recovery Key Risk
If you lose both your login password and your recovery method, your data is gone. That’s the point of encryption — Apple can’t “bypass” it for you.
Step 1: Find FileVault in System Settings
1 Open System Settings and search for FileVault
Step 2: Turn FileVault On
2 Click FileVault, then click Turn On…
Step 3: Choose Your Recovery Method
3 Choose one recovery option:
- iCloud account recovery (convenient)
- Recovery key (stronger control, higher responsibility)
⚠️ If You Choose Recovery Key
Store your recovery key offline. Recommended: write it down and keep it in a secure physical location, or store it in a trusted password manager vault.
Never paste your real recovery key into chat apps, email, notes apps, or screenshots you share publicly.
Step 4: Save Your Recovery Key (If Applicable)
4 If macOS shows you a recovery key, save it securely before continuing
Step 5: Confirm FileVault Is Enabled
5 Return to FileVault settings and confirm it shows FileVault is turned on
✅ You’re Done
FileVault is now protecting your data at rest. Keep your recovery method safe, and don’t share it with anyone.
