Macintosh Native Encryption

Encrypting files and folders

You can use Disk Utility to convert a folder into an encrypted disk image. Therefore, if you have files that need to be encrypted, put them in one folder and follow Apple's directions for creating a secure disk image.

Encrypting a Macintosh computer's disk with FileVault

This option, available through native software on your Mac computer will allow you to encrypt everything on your computer.

IMPORTANT NOTE: Before encrypting an entire University drive, talk to your IT Professional or the IT Support Center. You may only require an encrypted folder or external encrypted drive rather than encrypting an entire University computer.

The startup disc that came with the computer is needed to completely erase the drive. If the startup disc is missing, use Parted Magic. Talk to your departmental IT Professional (if your department has one) or contact IT Client Support & Services before downloading or using Parted Magic on UD equipment. Incorrectly burning a disk image for this boot CD could irreparably damage your PC.

1. Go to System Preferences.
2. Click Security & Privacy.
3. Click the FileVault tab.
4. Click Turn on FileVault....
5. If your computer has multiple user accounts, a dialogue box will drop down asking you to confirm user accounts that are allowed to unlock the encrypted drive.
6. Enable any necessary users and click Continue.
7. Another dialogue box will drop down asking you to copy the recovery key, which is an alternative to unlocking your disk if you lose or forget your password.
8. Write down the recovery key and put it in a safe place in case you forget your password.
9. Click Continue.
10. Next, a dialogue box will appear asking if you want to store your recovery key with Apple. Select either Store the recovery key with Apple or Do not store the recovery key with Apple and click Continue.
    • If you chose Store the recovery key with Apple, which will allow you to retrieve your recovery key from Apple if necessary, continue to step 11.
    • If you chose Do not store the recovery key with Apple, which means you must keep a record of your recovery key in case it is needed, skip to step 15.
11. If you selected Store the recovery key with Apple, you will be asked to answer three security questions.
12. Select the security questions from the security menus.
13. Type your answer to each question in the corresponding text box.
14. Click Continue.
15. In the Click "Restart" to restart the Mac and begin the encryption process dialogue box, click Restart.
16. If you lose your password or do not remember your recovery key, visit the Apple Support page on FileVault.

Encrypt external drive (OS X 10.8 or later)

1. Mount an external drive to computer.
2. Right-click the external drive from the Desktop or within the Finder.
3. From the drop-down menu, click Encrypt "your disk name".
4. Type a password in the Encryption password text box, retype the password in the Verify password text box, and type a hint in the Password hint text box.
   • This password will be used to decrypt the drive.
5. Click Encrypt Disk.
6. When the drive is encrypted, you can eject the external drive.

To decrypt the external drive:

1. Mount the encrypted external drive on your Macintosh.
2. A dialogue box asking for your password should automatically appear.
3. Type your password in the Password text box and click Unlock.

To remove encryption from the external drive:

1. Mount the encrypted external drive on your Macintosh.
2. A dialogue box asking for your password should automatically appear.
3. Click Cancel.
4. Right-click the external drive from your Desktop or within the Finder.
5. From the drop-down menu, click Decrypt "your disk name".
6. A dialogue box asking for your password will appear.
7. Type your password in the Password text box and click Turn Off Encryption.
8. When encryption has been removed, you can eject the external drive.