Illustration for How to Unlock an Encrypted APFS Volume on a Mac

How to Unlock an Encrypted APFS Volume on a Mac

Published by
Illustration for How to Unlock an Encrypted APFS Volume on a Mac

An encrypted APFS volume is unlocked with its password, recovery key, or an account authorized to access it. In most cases, connect the drive to your Mac, open it in Finder, and enter the password when macOS prompts you. You can also unlock the volume with Disk Utility or Terminal.

Quick Answer

  1. Connect the encrypted drive or volume to your Mac.
  2. Open Finder and select the volume under Locations.
  3. Enter the volume’s encryption password.
  4. Click Unlock.
  5. If the volume does not appear, open Disk Utility, select it, and click Mount or Unlock.

If you do not know the password or recovery key, macOS generally cannot unlock the volume. Erasing it may be the only way to reuse the drive, and erasing permanently deletes its data.

What an Encrypted APFS Volume Is

APFS is Apple’s file system for many Mac storage devices. An APFS volume is a logical storage area inside an APFS container. A single physical drive can contain several volumes, and each volume can have its own name and encryption settings.

Encryption protects the files stored on the volume. When the volume is locked, it may appear in Disk Utility or as a connected device without allowing you to open its files. Unlocking makes the volume available to macOS and Finder.

The password is usually created when the volume is formatted or encrypted. It may be different from your Mac login password. If another person encrypted the drive, ask that person for the correct password or recovery key.

Important: Do not erase, reformat, or initialize the drive while trying to unlock it. Those actions can permanently remove the encrypted data.

Unlock an Encrypted APFS Volume in Finder

Finder is the simplest method when macOS recognizes the volume normally.

  1. Connect the external drive to your Mac.
  2. Open Finder.
  3. In the Finder sidebar, look under Locations for the drive or APFS volume.
  4. Select the locked volume.
  5. Enter the encryption password in the prompt.
  6. Click Unlock.

After authentication, the volume should open in Finder. You can also access it from the Finder sidebar or your Mac’s desktop, depending on your Finder settings.

If the password is accepted but the volume does not open automatically, select it again in Finder. You can also open a new Finder window and look under Locations.

If the volume is not shown in Finder

Finder may be configured not to display external disks.

  1. Open Finder.
  2. Choose Finder > Settings from the menu bar.
  3. Click General.
  4. Under “Show these items on the desktop,” select External disks if you want connected drives to appear on the desktop.
  5. Click Sidebar.
  6. Select External disks under “Locations” if you want them listed in the Finder sidebar.

These settings only control visibility. They do not unlock the volume. If the drive still does not appear, use Disk Utility to check whether macOS detects it.

Unlock the Volume with Disk Utility

Disk Utility can show APFS volumes that are not visible in Finder. It also provides controls for mounting and unlocking storage.

Warning: Disk Utility includes Erase, Partition, and other destructive controls. Do not select them unless you intentionally want to remove or change the drive’s data.

  1. Connect the drive to your Mac.
  2. Open Disk Utility. You can find it in Applications > Utilities, or search for it with Spotlight.
  3. Choose View > Show All Devices in the menu bar.
  4. In the sidebar, find the APFS volume. It may appear beneath an APFS container or the physical drive.
  5. Select the encrypted volume.
  6. Click Mount or Unlock in the toolbar, depending on what Disk Utility displays.
  7. Enter the password when prompted.
  8. Click Unlock.

If successful, the volume should mount and become available in Finder. In this context, “mount” means macOS makes the volume available for reading and writing.

If Disk Utility shows the volume but the Mount button is unavailable, select the specific volume rather than the parent container or physical disk. APFS storage is hierarchical, so choosing the wrong level can hide the control you need.

Unlock an APFS Volume in Terminal

Terminal is useful when Finder or Disk Utility does not provide a clear result. It can also show the volume identifier needed for an unlock command.

Warning: Terminal commands can affect the wrong disk if you select an incorrect identifier. Do not use commands containing erase, delete, or format while troubleshooting an encrypted volume. The commands below identify and unlock a volume; they do not erase it.

Find the volume identifier

  1. Open Terminal from Applications > Utilities.
  2. Run:
diskutil list
  1. Locate the encrypted APFS volume in the output. Note its identifier, such as disk3s1.

The identifier will vary on every Mac. Do not copy an example identifier unless it matches the volume shown on your Mac.

For a more detailed view of APFS containers and volumes, see how to check APFS containers and volumes in Terminal on a Mac.

Unlock the volume

Replace disk3s1 with the identifier for your encrypted APFS volume:

diskutil apfs unlockVolume disk3s1

Press Return, then enter the volume password when Terminal requests it. Terminal does not display the password as you type, including dots or asterisks. This is normal. Press Return after entering it.

If the password is correct, macOS should unlock and mount the volume. You can verify this with:

diskutil info disk3s1

Look for information indicating that the volume is mounted and its mount point. You can also run diskutil list again to review the volume’s status.

Lock the volume again

If you want to remove access after using the drive, first close any files stored on it. Then run:

diskutil apfs lockVolume disk3s1

Replace disk3s1 with the correct identifier. Locking the volume unmounts it and requires the password again before its files can be accessed.

There is no need to run this command if you simply eject the drive. Ejecting safely removes the volume from macOS, but whether it remains encrypted and locked depends on the volume and how it is mounted. To avoid data corruption, always eject the volume in Finder before disconnecting the cable.

Unlocking with a Recovery Key

Some encrypted APFS volumes provide a recovery key. A recovery key is a separate string created for regaining access if the normal password is unavailable.

When macOS displays the unlock prompt, look for an option such as Show Hint or a recovery-key option. The wording can differ depending on how the volume was encrypted and which macOS version is installed.

Enter the recovery key exactly as it was saved. Check for:

  • Missing or extra characters
  • Confused letters and numbers
  • Incorrect capitalization, if applicable
  • Spaces copied from a document
  • Punctuation that was omitted when the key was recorded

Do not guess repeatedly. If the key does not work, confirm that it belongs to this specific volume. A FileVault recovery key for the Mac’s startup disk is not necessarily the same as a recovery key for an independently encrypted external APFS volume.

If You Forgot the Password

Encryption is designed to prevent access without valid credentials. Apple cannot generally bypass a password protecting an encrypted APFS volume.

Before considering erasure, check whether:

  • The password is stored in a password manager
  • You wrote it in a secure record
  • Another user created the encrypted volume
  • The drive came from another Mac or organization
  • A recovery key was saved separately
  • The password differs from your current Mac login password

If the volume contains important files, do not erase it or continue experimenting with partitioning tools. Consider consulting a reputable data-recovery professional, but understand that professional recovery cannot guarantee access to strongly encrypted data without the required credentials.

If the data is not needed and you only want to reuse the drive, you can erase the volume in Disk Utility. This permanently deletes the encrypted files.

  1. Open Disk Utility.
  2. Choose View > Show All Devices.
  3. Select the correct volume or physical drive.
  4. Click Erase.
  5. Choose a format and name.
  6. Confirm the operation.

Warning: Erasing is irreversible for practical purposes. Confirm that you have a backup before proceeding.

The best format depends on how you will use the drive. APFS is generally intended for Apple devices, while exFAT can be useful when the drive must work with both macOS and Windows. See APFS vs. exFAT: Which format should you use on a Mac? before choosing a new format.

Troubleshooting an Encrypted APFS Volume

The password is rejected

Confirm that you are using the volume’s encryption password, not necessarily your Mac login password. Type it manually instead of relying on an old saved entry, and check the keyboard layout if the password contains symbols.

If another user encrypted the drive, ask for the exact password. Passwords are case-sensitive when the encryption system treats uppercase and lowercase characters differently.

The drive appears, but the volume does not

Open Disk Utility and choose View > Show All Devices. Expand the physical drive and APFS container to look for the volume.

If the physical drive is missing too, check the cable, adapter, hub, and power source. Try a different port and, if possible, connect the drive directly to the Mac rather than through a hub.

The volume unlocks but immediately disappears

A loose connection, inadequate power, damaged cable, or failing drive can cause repeated disconnections. Eject the drive if it remains visible, reconnect it securely, and try another cable or port.

If the problem continues, stop writing data to the drive. Repeated disconnects can worsen file-system problems. See how to fix an external drive that keeps disconnecting from a Mac for additional connection checks.

Disk Utility reports an error

After ensuring you have a backup or accepting the risk to the data, select the unlocked or unmounted volume in Disk Utility and click First Aid. Follow the onscreen instructions.

Do not use First Aid as a substitute for the encryption password. It checks certain storage structures but cannot bypass encryption.

If First Aid cannot repair the volume and the files are important, avoid erasing it. Copy any accessible files and consider professional assistance.

Terminal says the volume cannot be unlocked

Check that you used the volume identifier, not the identifier for the physical disk or APFS container. Run:

diskutil list

Then retry the command with the exact identifier shown for the encrypted volume:

diskutil apfs unlockVolume disk3s1

If the identifier changes after reconnecting the drive, use the new identifier. Do not assume it will remain the same.

Frequently Asked Questions

Can I unlock an encrypted APFS volume without the password?

Usually, no. You need the volume password, an authorized account, or a valid recovery key. Encryption is specifically designed to prevent access without authentication.

Is an APFS volume password the same as my Mac password?

Not necessarily. An external APFS volume may have been encrypted with a separate password. Try your Mac password only if you know it was used when the volume was encrypted.

Can Disk Utility remove the encryption without deleting files?

No. Disk Utility can unlock, mount, check, or erase a volume, but removing protection without the proper credentials is not a supported way to recover access. Erasing the volume deletes its contents.

Why does the encrypted volume appear in Disk Utility but not Finder?

Disk Utility can display a detected but locked or unmounted volume. Finder normally shows the volume only after macOS unlocks and mounts it. Select the volume in Disk Utility and click Unlock or Mount.

Can I unlock the volume on another Mac?

Usually, yes, if the other Mac supports the encrypted APFS volume and you have the correct password or recovery key. Connect the drive, then use Finder, Disk Utility, or Terminal on that Mac.

Should I eject the drive after locking it?

Yes. Close open files, lock or eject the volume, and disconnect it only after macOS confirms that it is no longer in use. This reduces the risk of data corruption.

Final Thoughts

The normal way to unlock an encrypted APFS volume is to select it in Finder and enter its password. If Finder does not show it, Disk Utility can reveal and unlock the volume; Terminal provides a precise alternative when you know the volume identifier. Without the correct password or recovery key, do not erase the drive unless you are certain its data is no longer needed.