hardening OSX Sierra.

[macgig]

interesting article. Only read a little bit reading more now.

http://docs.hardentheworld.org/OS/MacOS_10.12_Sierra/index.html

 

[harryb2448]

Nothing new and unless you know how to use File Vault keep away from it.

 

[macgig]

I want to use File Vault, but just cant bring myself to try it or trust it. I thought File Vault is something you just turn on and forget it? it works in the background for us right? nothing for us to do or configure or think about once it's turned on?

 

[bollinger]

Nothing new and unless you know how to use File Vault keep away from it.

FileVault is not complicated. It's pretty straight forward and easy to set up. So easy in fact, that Apple started prompting users when they upgrade to High Sierra to encrypt the entire hard drive. You can set it up at the click of a button in settings -> Security and privacy -> FileVault. It just requires that you don't forget your user login password. If you do, you can either use your Apple ID or a Key (depending on what options you chose) that you must write down and hide that Apple displays on the screen to recover your files before it actually starts the encryption process. If you have FileVault turned on and adversary gets a hold of your Mac, there is nothing they can do to access your files, without the proper credentials.

 

[macgig]

so what unlocks File Vault when its turned on? just my password I use to log into my mac? And if I forget that login password to my admin user account, where do I enter that long password that file vault creates for me?

these are two things I don't quite understand about it.

 

[bollinger]

so what unlocks File Vault when its turned on? just my password I use to log into my mac? And if I forget that login password to my admin user account, where do I enter that long password that file vault creates for me?

these are two things I don't quite understand about it.

Your user login password is used to create the encryption key for FileVault during the initialization process. If you forget your user account password, you can enter the recovery key that you wrote down and hid directly in the same place where you would enter your password. As long as you have it correct, it will log you in, then you can go to settings -> users and groups and change your user password.

 

[harryb2448]

You get a special password and don't dare loose it. You will find threads here for folk that have lot is and it is NOT as simple as above.


http://www.mac-forums.com/switcher-hangout/341912-encryption.html?highlight=encryption+password