FileVault Error 195 on Mac: Causes and Disk Unlock Methods

What Does FileVault Error 195 Mean

FileVault Error 195 (code -195) occurs when attempting to unlock an encrypted FileVault volume on a Mac. The system refuses to accept the entered Recovery Key or user account password, and you see a message similar to "Could not unlock the volume" or "Incorrect Recovery Key".

This error means the system cannot verify the credentials you provided to access the encrypted disk. Important: this is not an error in the encryption itself, but an authentication problem. The disk remains encrypted and protected.

Causes

Error 195 is usually caused by one of the following:

1. Incorrect Recovery Key. The most common cause. You may have:
   • Made a typo (confusing 0/O, 1/I/L).
   • Used a Recovery Key from another Mac or another volume.
   • Lost the Recovery Key or are using an outdated version (if it was reset previously).
2. Corrupted FileVault metadata. A write failure, unexpected power loss, or disk error could have damaged the service information that links the Recovery Key to the volume.
3. Software conflict. Some disk management utilities, antivirus software, or low-level programs can interfere with the password verification process during boot.
4. Account issues. The user account password you are trying to use was changed after FileVault was enabled, but the system did not receive the updated hash (rare, but possible after a crash).
5. Outdated or corrupted macOS version. Critical security updates sometimes change FileVault authentication mechanisms.

Method 1: Carefully Check and Re-enter the Recovery Key

Before moving to more complex methods, ensure you are entering the Recovery Key with absolute precision.

1. Find the original Recovery Key. It should be saved in:
   • The printed copy you made when enabling FileVault.
   • An entry in the Passwords app (if you saved it there).
   • Your iCloud account (if you chose the option to save it in iCloud).
2. Examine each character carefully. Make sure:
   • You are not confusing numbers and letters: 0 (zero), O (capital o), 1 (one), I (capital i), L (capital el).
   • You are entering separators (spaces or hyphens) correctly—they must match the original format.
   • You are using only uppercase letters if the Recovery Key was in that format.
3. Try entering the Recovery Key on the login screen (before logging in) and in the volume unlock window (if it appears separately). Sometimes the interface differs.

Method 2: Use Another Account's Password

If your Mac has another administrator account, try logging into it.

1. On the login screen, select the other account.
2. Enter its password. If the system boots successfully, it means the Recovery Key is not tied to that account, and the problem is likely with your main password or Recovery Key.
3. Once logged in, open System Settings → Users & Groups.
4. Click the lock icon to make changes, then select your primary user account.
5. Click "Reset Password" and follow the instructions to set a new password for your user account. After this, try unlocking the disk with the new password.

Method 3: Reset the Recovery Key via Recovery Mode (macOS Recovery)

This is the primary method if the Recovery Key is lost, but you remember the password for any administrator account on this Mac.

1. Boot into Recovery Mode:
   • For Apple Silicon Mac: Shut down the Mac, then hold the power button until the startup options window appears. Select "Options" → "Continue".
   • For Intel Mac: Shut down the Mac, then turn it on and immediately hold Command (⌘) + R until the Apple logo appears.
2. Select your administrator account and enter its password.
3. In the utilities, select "Reset Password" from the Utilities menu.
4. In the top-left corner of the window, select "Startup Disk" (usually Macintosh HD).
5. On the right side of the window, you will see the option "Reset Recovery Key". Click it.
6. Important: This option is available only if you know the password of the current (or any other) administrator account on this Mac. The system will generate a new Recovery Key and display it on the screen. Be sure to write it down in a safe place!
7. After resetting, restart the Mac and try logging in with the new Recovery Key.

Method 4: Create a Temporary New Account via Recovery

If you do not know any user account passwords on this Mac, but you have physical access to the computer, you can try to create a new user account from Recovery Mode.

1. Boot into Recovery Mode as described in Method 3.
2. From the Utilities menu, select "Terminal".
3. In Terminal, run the command to reset the password and create a new user:

   resetpassword
   

   (or find the "Reset Password" utility in the graphical interface).
4. The utility may offer to reset the password for an existing user. If that does not help, try mounting the system volume and manually creating a new user via Terminal, but this is a high-risk method requiring deep knowledge. Often, this path does not unlock the existing encrypted volume but only allows you to erase it.

Method 5: Contact Apple Support and Last Resorts

If none of the above methods work, and the Recovery Key is lost while passwords for all user accounts are unknown, unfortunately, it is impossible to recover access to the data on the encrypted disk. FileVault encryption is designed for this scenario.

1. In this case, you will need to completely erase the disk and reinstall macOS.
2. To do this, boot into Recovery Mode.
3. Open Disk Utility.
4. Select the main encrypted volume (e.g., Macintosh HD), click "Erase".
5. Caution: This will permanently delete all data on the disk.
6. After erasing, close Disk Utility and select "Reinstall macOS".
7. After a clean install, you can set up the Mac again and, if needed, restore data from a backup (Time Machine) if one was created before enabling FileVault or with a Recovery Key.

Prevention

To avoid being locked out due to error 195:

1. Do not lose your Recovery Key. When first enabling FileVault, macOS strongly recommends you print the Recovery Key and store it in a safe place (not on the same computer!). Save it in a password manager (e.g., 1Password, Bitwarden).
2. Use iCloud for your Recovery Key. When enabling FileVault, you can choose the option "Allow my iCloud account to unlock my disk". This links the Recovery Key to your Apple ID, but does not eliminate the need for a separate Recovery Key in case you lose access to iCloud.
3. Keep macOS updated regularly. Install all security updates, which may contain fixes for encryption components.
4. Have a working backup plan. Set up Time Machine to an external drive. Backups are made at the file system level and are independent of the disk's encryption state. This is your primary safeguard against data loss.