Contents
What happens if you encrypt both containers before enabling FileVault?
If you encrypt both containers prior to enabling FileVault, all that will happen is that FileVault will enable login on decrypt. It won’t change anything about the encryption. FileVault is “whole-disk” encryption. I don’t think it encrypts by partition, but I couldn’t find any wording in the Apple articles I found to confirm that.
Can a linked iCloud account enable FileVault?
When enabling FileVault using the GUI (System Preferences < Security & Privacy < FileVault), it is possible to configure a linked iCloud account which can be leveraged for lost password Will enabling FileVault convert my HFS+ disk to APFS?
Do you need to encrypt both partitions to boot?
If you have already encrypted both partitions, then there is nothing else you need to do. FileVault is just a means to unlock your boot disk so you can startup, and to do so with your login password so that you don’t have to enter two different passwords to login after booting.
What to do if you lose your FileVault recovery key?
If you don’t want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk. If you lose both your account password and your FileVault recovery key, you won’t be able to log in to your Mac or access the data on your startup disk.
What do you need to know about FileVault?
FileVault is just a little magic that allows you to decrypt and log into an encrypted volume. If you encrypt both containers prior to enabling FileVault, all that will happen is that FileVault will enable login on decrypt. It won’t change anything about the encryption. FileVault is “whole-disk” encryption.
How do you encrypt APFS on a Mac?
You can encrypt APFS volumes (and partitions that formatted as Mac OS Extended (Journaled)) by mounting the volume or partition, then going to the Finder. Right-click (or hold down Control as you click) on the volume or partition, then choose Encrypt.