FileVault protects the data on a Mac startup disk by requiring authorised credentials before the information can be accessed. On Macs with Apple silicon or the T2 Security Chip, storage is already encrypted, but Apple explains that turning on FileVault adds protection by tying access to a login password and recovery method.
Back up before changing encryption
Connect a suitable Time Machine disk or use an organisation-approved backup. Let the backup finish, then restore one harmless test file to prove it works. A backup icon or “completed” message is not enough if the disk cannot actually restore data.
FileVault is designed to protect information, but forgotten credentials, disk faults, or an interrupted repair can still make data unavailable. Our guide to backing up a computer covers the difference between a local backup and a second copy kept away from the device.
Prepare user accounts and passwords
Sign in with an administrator account. Check that each person who should start the Mac knows their own login password and can sign in normally. Remove obsolete user accounts only after their files have been preserved and ownership is clear.
On shared or managed Macs, FileVault access is granted per user. A person whose account is not enabled for FileVault may not be able to unlock the startup disk directly. Company and school Macs may escrow recovery keys through device management, so ask IT before changing the setting.
Turn on FileVault
- Choose Apple menu > System Settings.
- Open Privacy & Security and scroll to FileVault.
- Select Turn On and authenticate with the administrator password.
- Choose the recovery option shown for that Mac and account.
- Record the recovery information securely before closing the dialog.
The wording can differ by macOS version and whether the Mac is managed. Do not copy a recovery key into an ordinary note stored only on the same Mac. Anyone with that key may be able to unlock protected data, while losing every recovery route may make the data impossible to recover.
Choose and store the recovery method
Apple may offer recovery through an Apple Account or a FileVault recovery key. Read the option carefully. If you receive a key, write or print an accurate copy and keep it in a locked location separate from the computer. A password manager may be appropriate if it is independently accessible and protected by strong authentication.
Do not photograph the key with the same Mac or leave it in email drafts, chat messages, or a desk drawer beside the device. Organisations should follow their documented key-escrow and staff-departure procedures instead of relying on one employee.
Allow encryption to complete
Keep a portable Mac connected to power and avoid forced shutdowns. You can continue working, but initial encryption time depends on storage size, disk speed, and system activity. If the Mac becomes unusually hot, reports disk errors, or repeatedly restarts, stop and use official support rather than running third-party “encryption repair” tools.
Verify FileVault and recovery readiness
- Return to FileVault settings and confirm it is on.
- Restart the Mac and test each authorised user account.
- Confirm the recovery key copy is legible without entering it unnecessarily.
- Run another backup and restore a test file.
Never test recovery by deliberately locking out the only administrator or by posting the key in a support forum. The normal sign-in test and a secure record review are safer.
Philippines-specific precautions
FileVault is especially useful for laptops used in airports, cafés, schools, coworking spaces, and field work. During brownouts, let the Mac run from its battery or a suitable UPS rather than repeatedly losing power. Keep recovery records away from areas vulnerable to flooding, humidity, theft, or fire.
When to contact Apple or IT
Get official help before proceeding if the FileVault control is locked, no administrator can authenticate, the disk shows errors, or the recovery choice is unclear. For a company or school Mac, use the organisation’s IT channel. Do not pay anyone offering to bypass FileVault or recover data without authorised credentials.
Checked against Apple’s FileVault, recovery, and Time Machine guidance on August 30, 2026. Menus and recovery options vary by macOS version, hardware, and device-management policy.
