How to protect your data with Mac encryption

How-to
By Bryan M Wolfe
published

FileVault
FileVault (Image credit: iMore)
Jump to:

To better protect your files, Apple offers several built-in Mac encryption tools. Once implemented, the files are digitally scrambled, so you need a secret key, password, or portable RFID chip to read them. Here's a look at how to encrypt macOS.

These steps work on macOS Monterey and earlier with all of the best Macs.

How to encypt with FileVault

When starting your Mac for the first time, the system will ask you whether to use FileVault. When activated, FileVault will automatically encrypt content in the background. It uses XTS-AES-128 encryption with a 256-bit key to help prevent unauthorized access to the information on your startup disk. As a result, FileVault is the easiest and most practical way to encrypt everything on your computer. If you didn't activate FileVault when setting up your computer, you can do so manually at any time.

  1. Go into System Preferences on your Mac.
  2. Click Security & Privacy.
  3. Choose the FileVault tab.

To encypt with FileVault, go into the System Preferences on your Mac, then click Security & Privacy. Choose the FileVault tab. (Image credit: iMore)
  1. Click the lock icon at the bottom left.
  2. Enter an administrator name and password.
  3. Select Turn on FileVault. If there's more than one account on your Mac, you'll need to type in the password for those users on the next screen, or they won't be able to unlock the disk. For each user, click the Enable User button and enter the user's password. User accounts that you add after turning on FileVault are automatically enabled.
  4. Click Continue.

To encypt with FileVault, click the lock icon at the bottom left, then enter an administrator name and password. Select Turn on FileVault. Click Continue. (Image credit: iMore)

Assuming you're Mac is using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password.

There are various ways to choose how to unlock your Mac and reset your password when using FileVault. If you rather not use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe — other than on your encrypted startup disk.

To disable FileVault

You can disable FileVault at any time by following the directions below:

  1. Go into System Preferences on your Mac.
  2. Click Security & Privacy.
  3. Choose the FileVault tab.

To encypt with FileVault, go into the System Preferences on your Mac, then click Security & Privacy. Choose the FileVault tab. (Image credit: iMore)
  1. Click the lock icon at the bottom left.
  2. Enter an administrator name and password.
  3. Select Turn off FileVault.

How to encrypt folders

You can use Mac encryption to protect individual folders at any time. This solution is ideal when you plan on sharing the folders.

  1. Create a folder on your Mac. You can right-click anywhere on your computer and choose New Folder.
  2. Rename the folder when applicable.
  3. Add the files you wish to encrypt to the folder.
  4. Choose the Finder in the Mac dock.

To encrypt folders, create a folder by right-clicking anywhere on your computer and selecting New Folder. Rename the folder, when applicable. Add files you wish to encrypt to the folder. (Image credit: iMore)
  1. Select Go on the menu bar.
  2. Pick Utilities.
  3. Choose Disk Utility.

To encrypt folders, choose Finder in the Mac Dock, then select Go on the menu bar. Pick Utilities, then choose Disk Utility. (Image credit: iMore)
  1. Select File.
  2. Choose New Image.
  3. Pick Image from Folder.
  4. Find, then highlight the folder you wish to encrypt.
  5. Click Choose at the bottom right.

To encrypt folders, select File > New Image > Image from Folder. Highlight the folder you wish to encrypt, then click Choose. (Image credit: iMore)
  1. Toggle your level of encryption (128-bit or 256-bit AES Encryption).
  2. Add a password, then confirm.

To encrypt folders, toggle your level of encryption, then add a password, which you must then confirm. (Image credit: iMore)
  1. Select Choose.
  2. Choose Read/Write as your Image Format selection at the bottom right.
  3. Select Save to exit the window.

To encrypt folders, select Choose, then Read/Write as your Image Format. Select Save to exit the window. (Image credit: iMore)
  1. Click Done when the encryption process completes.
  2. Exit Disk Utility.

To encrypt folders, click Done, then exit the Disk Utility. (Image credit: iMore)

Your created .dmg file is secure. You can share the file just as you would any other one. Double-click to open it — you'll need to type in the password to complete the process. That's Mac encryption!

Questions?

Let us know in the notes below whether you have questions about Mac encryption or macOS overall.

Bryan M Wolfe
Bryan M Wolfe
Staff Writer

Bryan M. Wolfe has written about technology for over a decade on various websites, including TechRadar, AppAdvice, and many more. Before this, he worked in the technology field across different industries, including healthcare and education. He’s currently iMore’s lead on all things Mac and macOS, although he also loves covering iPhone, iPad, and Apple Watch. Bryan enjoys watching his favorite sports teams, traveling, and driving around his teenage daughter to her latest stage show, audition, or school event in his spare time. He also keeps busy walking his black and white cocker spaniel, Izzy, and trying new coffees and liquid grapes.