What you will achieve
Full-disk encryption on your Mac’s internal storage with FileVault, plus recovery keys stored somewhere you will actually find them.
Why FileVault matters
If the Mac is lost or stolen while powered off, encryption prevents casual access to your data. It does not replace backups or account passwords.
1) Before enabling
- Ensure stable power — initial encryption runs in background and can take hours on large drives.
- Confirm Time Machine or other backups are current.
- On managed Macs, check IT policy — FileVault may be mandated or restricted.
2) Turn on FileVault
- System Settings → Privacy & Security → FileVault.
- Click Turn On.
- Choose recovery method:
- iCloud account — convenient; understand Apple ID recovery implications.
- Recovery key — store offline in password manager or safe; Apple cannot recover a lost key easily.
- Restart if prompted and allow encryption to complete (progress in FileVault panel).
3) Performance expectations
Apple Silicon Macs handle encryption with minimal impact. Older Intel Macs may see slight I/O overhead — usually acceptable for laptops.
4) Recovery scenarios
- Forgotten password: reset via Apple ID if enabled, or use recovery key at login.
- macOS Recovery reinstall: disk remains encrypted — you need account password or recovery key.
Verify
FileVault shows Encryption in progress then FileVault is turned on. Reboot and log in normally. Store recovery key outside the Mac.