Reply to thread

Message

<blockquote data-quote="MacInWin" data-source="post: 1926468" data-attributes="member: 396914">From Apple:You can read for yourself here: <a href="https://support.apple.com/en-us/HT204837" target="_blank">Use FileVault to encrypt your Mac startup disk</a>In T2 systems and Mx systems the entire USER area is encrypted. Read this:[URL unfurl=&quot;true&quot;]https://eclecticlight.co/2021/08/20/disk-encryption-filevault-and-hardware-encryption/[/URL]Apple encrypts with a system key, no matter what. If the user wants to, they can add a second key to further protect the data, but if the system is simply read outside of the operating system (i.e., removed from the system in Intel machines, or bypassed in Apple Silicon machines, the drive itself is encrypted and unreadable. If the user doesn't add a second key by turning on FV, then the first key is provided at boot time by the use of the login information for the user.</blockquote>

[QUOTE="MacInWin, post: 1926468, member: 396914"] From Apple: You can read for yourself here: [URL="https://support.apple.com/en-us/HT204837"]Use FileVault to encrypt your Mac startup disk[/URL] In T2 systems and Mx systems the entire USER area is encrypted. Read this: [URL unfurl="true"]https://eclecticlight.co/2021/08/20/disk-encryption-filevault-and-hardware-encryption/[/URL] Apple encrypts with a system key, no matter what. If the user wants to, they can add a second key to further protect the data, but if the system is simply read outside of the operating system (i.e., removed from the system in Intel machines, or bypassed in Apple Silicon machines, the drive itself is encrypted and unreadable. If the user doesn't add a second key by turning on FV, then the first key is provided at boot time by the use of the login information for the user. [/QUOTE]

Verification

Name this item. 🍎