implicated about your Mac ’s inauguration SSD or heavy disk drive falling into someone else ’s hand ? Encrypting the startup intensity prevent memory access to that driving force unless they know an account word password or , in some eccentric , possess the correct ironware to unlock the contents .
Apple automatically enables drive encoding for the startup volume on any Intel Mac with a T2 Security Chip and on all M1 - based Macs . For other Intel Macs , when you enable FileVault the startup mass becomes cipher , too . ( FileVault on all Macs also enables boot protection , which keeps your code drive locked down until you corroborate your login with an authorized account statement . )
But what of backups ? If you use Time Machine via a local or networked cause , your plunk for - up single file are well approachable if someone come off the drive and secure it into another information processing system .
Time Machine comprehend data encoding in one of two ways :
In the Time Machine preference pane , the current backup intensity or backup will show the word code under the volume ’s name when encryption is active .
The countersign you enter should be strong and you need to store it on your own — macOS does n’t make a record in the system Keychain . you’re able to expend 1Password or another manager to keep a book . Or apply another system that lets you keep encrypted notes . Even write it in a paper notebook you’re able to keep secure — though it does n’t help you if it ’s lost , stolen , or destroyed .
Time Machine should secure the word to the loudness or backup as long as you ’re in the current session . After restarting and in some other cases , you may be prompted to re - enter the volume password . You may never be call for to re - enter for a local or networked Time Machine backup password unless you change your backup destinations for the Mac you ’re backing up .
This Mac 911 article is in reception to a question submit by Macworld reader Bill .
Ask Mac 911
We ’ve hoard a lean of the questions we get ask most oft , along with answer and link to column : take our super FAQ to see if your interrogative is covered . If not , we ’re always looking for fresh problems to solve ! netmail yours tomac911@macworld.com , including screen captures as appropriate and whether you want your full name used . Not every question will be answered , we do n’t respond to email , and we can not supply direct troubleshooting advice .