How to use FileVault to protect your Mac from the manual password reset
Tips Makradar / / December 19, 2019
To prevent unauthorized access and curious eye on OS X, as in all modern operating systems, user passwords are used. Most makovodov it, of course, use, thereby ensuring the security of your account, the entrance to which it will not be carried out until you enter the user's password. It is sad, but there are various ways that allow you to reset the administrator password and gain access to all the information stored on your computer.
Users for whom data security is not on the last place, certainly wish insure themselves against such things and prevent unauthorized access to personal information. This can be done using the built-in encryption mechanism FileVault.
* * *
The essence of this method lies in the fact that when you turn on FileVault password must be entered before the download account and it turn made inaccessible to use known methods of password reset (Single User Mode, booting from external drives, etc.). Using FileVault is perhaps the easiest way to get around all of these attempts, because in addition to encrypt the data on the disk, it necessarily requires a password in the early stages of the boot system. And that is what we need!
For clarity, we simplify all the above and see how looks the inclusion of the Mac before and after activating FileVault:
- Before. Download> Single User Mode> Reset Password> Log in under root-user
- After. Downloads> Require a password to access FileVault
FileVault is extremely easy to set up and turned on in System Preferences OS X:
1. open the settings and go to the section Protection and safetyOn the tab FileVault.
2. Click on the icon, the lock and enter the password that you want to enable encryption.
3. If you have more than one account - choose which of them will use encryption.
4. Securely stores a recovery key - if you forget your password, no key will be impossible to gain access to your data.
5. Choosing to store (in encrypted form) the recovery key on Apple's servers or not. If yes - then select three questions and indicate their answers. According to Apple it identifies you, if requested to do it if you lose the key.
6. Reboot your computer to apply the changes and enable encryption.
However, it is important to understand the risks and limitations, which will entail the use of full-disk encryption. There is a view of a possible drop in disk read speed and the inability to restore your data whomever that may be, in the case of password loss. But I think it's not a problem if you have decided on such a serious step as turning on disk encryption - you are, by definition, have to be careful user and securely store your passwords. Therefore, the use of FileVault is hardly possible to recommend the average user, as opposed to makovodov that have special security requirements. If you belong to the latter, I would suggest to turn on FileVault and take advantage of encryption. It is also very useful to develop the habit of always blocking your the Mac, even if you leave the workplace for a few minutes.
Initial encryption of my SSD of 120 GB, filled with slightly more than half - took about 40 minutes.
For performance reasons, FileVault encryption is best used on Macs with solid-state SSD-drives, although with the usual hard drives, he also works pretty good (but some users have reported a significant drop in the read / write speed in this case).
* * *
As you can see, Apple has once again confirms the consistency of its operating system, which includes all the necessary tools. FileVault excellent encryption service that provides also additional safety benefits.
If you have any questions - feel free to ask in the comments. Always I will be glad to hear your opinion!