You can turn on FileVault from System Settings on a Mac with macOS disk encryption support. Open Apple menu > System Settings, select Privacy & Security, choose FileVault, click Turn On, and follow the prompts to select a recovery method.
Before you begin, connect your Mac to power, make sure you know your Mac login password, and create a current backup. FileVault encrypts the startup disk so its files cannot be read without authorized credentials or a recovery key.
Quick Answer
- Back up your Mac with Time Machine or another backup method.
- Connect your Mac to power.
- Open Apple menu > System Settings.
- Select Privacy & Security in the sidebar.
- Click FileVault.
- Click Turn On.
- Choose how you want to recover access if you forget your password.
- Enter an administrator password if macOS requests it.
- Keep your Mac connected to power while encryption begins and completes.
The exact wording and location of some controls can vary between macOS releases. If you do not see FileVault in Privacy & Security, use the search field in System Settings and search for “FileVault.”
What Is FileVault?
FileVault is Apple’s built-in full-disk encryption feature. Encryption converts the information on your Mac’s startup disk into an unreadable format. When you sign in with an authorized account, macOS unlocks the disk so you can use your files normally.
Without the correct password or recovery method, someone who removes the storage device or otherwise tries to access it outside your normal macOS sign-in process should not be able to read the encrypted data.
FileVault protects data stored on the Mac. It does not automatically encrypt files stored on external drives, network locations, cloud services, or removable media. Those locations may have their own encryption options.
Why Turn On FileVault?
FileVault is especially useful if your Mac is lost, stolen, or accessed by someone who should not see your files. It can help protect documents, photos, saved work, browser data, and other information stored on the startup disk.
FileVault is most important for portable Macs because a stolen laptop can be accessed outside your normal environment. It can also be useful on a desktop Mac if multiple people can physically access it.
FileVault does not replace:
- A strong Mac login password
- Automatic screen locking
- A current backup
- Software updates
- Careful control of user accounts
- Encryption for external drives or cloud data
If someone knows your Mac login password and can sign in to your account, FileVault will not prevent access to the files that account is allowed to use.
What to Do Before Enabling FileVault
Back up your Mac
Create a current backup before turning on encryption. A backup gives you a way to recover important files if you encounter a hardware problem, forget your credentials, or need to erase and restore the Mac.
You can use Time Machine with an external storage device:
- Connect the backup drive to your Mac.
- Open Apple menu > System Settings.
- Select General, then Time Machine.
- Follow the onscreen instructions to select the backup disk and configure backups.
Do not treat FileVault as a backup. Encryption protects access to the data on your Mac, but it does not create another copy of that data.
Confirm that you know your login password
You may need an administrator password to enable FileVault. More importantly, you will need an authorized password or recovery method to unlock the startup disk after certain restarts.
If you use a password manager, make sure you can access the information needed to recover your Mac without relying only on the Mac itself.
Connect the Mac to power
Encryption can take time, depending on the amount of data, the storage device, and what you are doing on the Mac. Connect a MacBook to power before starting and leave it connected while the process runs.
Save your work and close important apps
Turning on FileVault can require a restart. Save open documents and close apps before you begin. A restart can interrupt unsaved work.
Decide how you will recover access
During setup, macOS may offer a recovery option associated with your Apple Account or a separate recovery key. Read the choices carefully and store any recovery information securely.
A recovery key is sensitive information. Anyone who has it and can satisfy the Mac’s recovery requirements may be able to unlock the encrypted disk. Do not leave it in an unlocked document on the Mac or share it casually.
How to Turn On FileVault in System Settings
The following is the standard graphical method for enabling FileVault.
- Click the Apple menu in the upper-left corner of the screen.
- Select System Settings.
- Click Privacy & Security in the sidebar.
- Scroll to the FileVault section, or search for “FileVault” using the search field.
- Click Turn On.
- Enter an administrator password if prompted.
- Choose a recovery method when macOS displays the available options.
- Carefully record the recovery information if macOS provides a recovery key.
- Confirm that you want to enable FileVault.
- Save your work and follow any restart instructions.
Once enabled, FileVault begins encrypting the startup disk. You can generally continue using the Mac, although you may notice temporary performance changes while encryption is in progress.
Do not shut down the Mac unnecessarily during the initial encryption process. Keep it connected to power and allow the process to finish. If you must restart or use the Mac elsewhere, follow the onscreen instructions and make sure you know your recovery credentials.
How to Turn On FileVault in System Preferences
Older macOS releases use System Preferences instead of System Settings. If your Mac has System Preferences, use these steps:
- Open the Apple menu .
- Select System Preferences.
- Click Security & Privacy.
- Select the FileVault tab.
- Click the lock icon if the settings are locked.
- Enter an administrator password.
- Click Turn On FileVault.
- Select a recovery option and follow the onscreen instructions.
- Save your recovery information in a secure location.
- Allow the Mac to restart or begin encryption as requested.
The labels may differ slightly depending on the macOS release. The important controls are the FileVault settings and the option to turn encryption on.
Choose a FileVault Recovery Method Carefully
FileVault is designed to prevent unauthorized access, so recovery planning is essential. If you forget your login password and do not have an available recovery method, recovering the data may be difficult or impossible.
Apple Account recovery
Depending on the Mac and macOS configuration, you may be able to use your Apple Account to reset access or recover the disk. This option depends on being able to authenticate to the Apple Account associated with the Mac.
Make sure you know the Apple Account email address and password, and keep access to any trusted phone number or device used for verification.
Recovery key
A recovery key is a long, unique code that can be used to recover access to an encrypted Mac. Write it down accurately or store it in a secure password manager or other protected location.
Do not store the only copy of the recovery key on the Mac being encrypted. Do not take a photo of it and leave that photo in an unprotected photo library or cloud account.
If the recovery key is lost and no other recovery option works, you may not be able to access the files on the encrypted startup disk.
Work or school Macs
If your Mac belongs to an employer, school, or organization, FileVault settings may be controlled by device-management software. An administrator may manage recovery keys and user access.
Contact the organization’s IT department before changing FileVault settings. Do not erase the Mac or remove management controls to bypass a FileVault problem.
Check Whether FileVault Is Enabled
You can check FileVault’s status in the graphical settings:
- Open System Settings.
- Select Privacy & Security.
- Open FileVault.
- Review the status shown on the FileVault page.
On older systems:
- Open System Preferences.
- Select Security & Privacy.
- Click the FileVault tab.
- Review the displayed status.
The Mac may show that encryption is in progress rather than complete. Leave the Mac connected to power until the process finishes.
Performance and Battery Considerations
FileVault encryption is designed to work in the background, but the initial encryption process can use storage and processor resources. You may notice slower performance, increased fan activity, or faster battery drain while it is running.
To reduce interruptions:
- Start the process when you do not need maximum performance.
- Connect a MacBook to power.
- Close apps that use substantial processor or disk resources.
- Avoid interrupting the process unnecessarily.
- Keep enough free storage available for normal macOS operation.
After the initial encryption completes, everyday performance is often less noticeable than during the setup process. The effect depends on the Mac’s hardware, storage, workload, and macOS configuration.
FileVault does not make a Mac immune to malware, phishing, account theft, or unauthorized access after someone has successfully signed in. It protects the encrypted storage, particularly when the Mac is shut down or otherwise locked at the disk-access level.
How to Turn Off FileVault
Turning off FileVault decrypts the startup disk. This changes the Mac’s security behavior and can take time. Back up your Mac before disabling encryption, and save your work because macOS may request a restart.
- Open Apple menu > System Settings.
- Select Privacy & Security.
- Click FileVault.
- Choose the option to turn FileVault off.
- Authenticate when prompted.
- Confirm the change.
- Keep the Mac connected to power while the disk is decrypted.
On older macOS releases, open System Preferences > Security & Privacy > FileVault, unlock the settings, and select the option to turn FileVault off.
Do not turn off FileVault simply because encryption is still in progress. Check the status first and allow the initial process to complete unless you have a specific reason to stop it.
Troubleshooting FileVault
FileVault is missing from System Settings
Use the search field in System Settings and search for “FileVault.” If it still does not appear, your Mac may use an older interface, or an organization may control the setting.
On older systems, look in System Preferences > Security & Privacy > FileVault.
The Turn On button is unavailable
You may need to:
- Sign in to an administrator account
- Click the lock or authentication control first
- Enter the correct administrator password
- Install pending macOS updates
- Contact an organization’s administrator if the Mac is managed
You cannot remember your password
Do not guess repeatedly without a recovery plan. Use the available macOS password-reset process or the FileVault recovery option shown on the screen. If the Mac is managed by an organization, contact its IT department.
A recovery key should be entered exactly as provided. Keep similar characters and formatting clear when transcribing it.
Encryption appears stuck
Encryption can take a long time, especially when the Mac contains a large amount of data or is being used heavily. Connect the Mac to power, close unnecessary apps, and give the process time.
If the status does not change for an extended period, restart only if macOS allows it or after saving your work. A forced shutdown can cause unsaved work to be lost.
The Mac starts in recovery mode after enabling FileVault
Follow the onscreen instructions and enter the authorized password or recovery information. If you cannot proceed, avoid erasing the Mac until you have confirmed that you have a current backup and have explored all available recovery options. Erasing an encrypted Mac can remove access to the files stored on it.
You lost the recovery key
Check your password manager, secure records, printed documents, or the organization that configured the Mac. If you used an Apple Account recovery option, make sure you can sign in to that account and complete any required verification.
If no recovery method is available, data recovery may not be possible.
Frequently Asked Questions
Does FileVault encrypt the entire Mac?
FileVault encrypts the Mac’s startup disk. It does not automatically encrypt every external drive, USB device, network location, or cloud account you use.
Will FileVault delete my files?
Turning on FileVault is not intended to delete your files. However, you should always create a backup before changing disk-security settings. A restart may also close apps, so save your work first.
Can I use my Mac while FileVault encrypts it?
Usually, yes. macOS can encrypt the startup disk while you continue working, but performance may temporarily change. Keep the Mac connected to power and avoid interrupting the process.
What happens if I forget my Mac password?
You will need an available recovery method, such as an Apple Account option, a FileVault recovery key, or help from an organization’s administrator. Without valid credentials or recovery information, access to the encrypted data may not be possible.
Does FileVault protect my Mac when it is unlocked?
FileVault primarily protects data when the storage is locked, such as when the Mac is shut down or requires disk authentication. It does not stop someone from using files after signing in to an authorized account.
Should I turn on FileVault for a MacBook?
FileVault is particularly useful for a MacBook because it can be lost or stolen while away from home. Before enabling it, make sure you have a current backup and a secure recovery plan.
Do I need to encrypt an external drive separately?
Yes. FileVault protects the startup disk, not necessarily external storage. If an external drive contains sensitive information, review that drive’s encryption options separately before storing important data on it.
Can I turn FileVault off later?
Yes, you can turn it off from the FileVault settings. Decrypting the disk can take time and changes your Mac’s protection, so back up your files first and keep the Mac connected to power.
Final Thoughts
FileVault is a practical way to encrypt a Mac’s startup disk and protect stored data if the computer is lost, stolen, or accessed outside normal macOS sign-in. Before turning it on, create a backup, save your work, connect to power, and choose a recovery method you can safely access later. Most importantly, protect the recovery key or Apple Account information—without a valid recovery path, encrypted data may be impossible to recover.