Enabling FileVault on macOS: Step-by-Step Encryption Guide

Introduction

FileVault is a full disk encryption feature available in macOS. It uses the XTS-AES-128 algorithm to encrypt the entire contents of your startup disk, protecting your data in case your Mac is lost or stolen. By enabling FileVault, you ensure that no one can access your files without your user password or a recovery key. This guide will walk you through the simple steps to activate FileVault in modern versions of macOS.

Prerequisites

Before you begin, ensure that:

• You have macOS 10.13 (High Sierra) or later installed.
• Your Mac has sufficient free space (approximately 10% of the total disk volume) for temporary encryption files.
• You are logged in with an administrator account.
• If you plan to use an iCloud account for recovery, ensure iCloud is enabled and you remember your Apple ID password.

Step-by-Step Instructions

Step 1: Open FileVault Settings

1. Click the Apple  menu in the top-left corner of the screen.
2. Select "System Settings".
3. In macOS Ventura and later: go to the "Privacy & Security" section. In older versions (pre-Ventura), open "Security & Privacy" → "FileVault" tab.
4. Click the "Turn On FileVault..." button. If the button is inactive, log out and log back in with an administrator account.

Step 2: Choose a Recovery Method

After clicking "Turn On FileVault...", the system will prompt you to select a method to recover the encryption key:

• Recovery Key: The system will generate a 24-character key. You must write it down and store it in a secure location (e.g., a password manager or on paper in a safe).
• iCloud Account: The recovery key will be linked to your Apple ID. You will be able to recover it by answering security questions or using two-factor authentication.

Select the appropriate option and click "Continue".

Step 3: Confirm Start of Encryption

• If a recovery key was selected: The system will display it on the screen. Be sure to write down the key exactly as shown (pay attention to case and characters). After recording it, click "Continue".
• If iCloud was selected: The system will verify your account activity.

Next, enter the password for the current user to confirm and click "Encrypt Disk".

Step 4: Wait for the Process to Complete

Encryption will begin in the background. You can continue using your Mac. The progress will be displayed in the FileVault settings. The process may take anywhere from a few minutes to several hours, depending on the disk size. Keep your Mac turned on and plugged into power until completion.

Verify the Result

Once encryption is complete, the FileVault settings will show the status "FileVault is On". You can also check via Terminal:

sudo fdesetup status

If the command returns FileVault is On., encryption is active.

Potential Issues

• Insufficient free space: Delete unnecessary files or move them to an external disk. A minimum of 10% free space is required.
• "Turn On FileVault" button is inactive: Log in with an administrator account. Check if FileVault is already enabled.
• Encryption does not start after selecting iCloud: Ensure iCloud is active. Try restarting your Mac and repeating the steps.
• Lost recovery key: If you chose a key and lost it, regaining access to your data will be impossible. You will have to erase the disk and reinstall macOS. Always store your key in a secure location.