Hot answers tagged

16

Yes, in 10.9+ you can roll it back while its busy encrypting diskutil cs revert /Volumes/title_drive -passphrase You will then be promted with the OS X password unlock/decrypt dialog. After that it starts decrypting. The title_drive you can look up with diskutil list or ls -al /Volumes Check the status with diskutil cs list Look for "Conversion ...


14

Core Storage versus resizing … Will I need to decrypt my Lion HD in order to resize it? … For 10.7 (Build 11A511): yes. Whether a future release of OS X will allow greater flexibility, I don't know. If you use diskutil to monitor backward conversion — diskutil coreStorage list — you may find that the amount converted eventually falls short, just ...


6

Apparently Catacombae (aka "DMGExtractor") can read encrypted sparse images if you have the password.


5

From what I have read, people have not seen significant slowdowns in performance. However, this does not mean there is not one. http://www.oreillynet.com/pub/a/mac/2003/12/19/filevault.html This is a good article, but it does claim there is not really any performance problems and it is from when Filevault first came out 6 years ago. ...


5

A third party solution like Dropbox should always be considered insecure, as you leave your data in the hands of a company you cannot "see or touch". Such companies might operate under the laws of another country which permits/forbids differently than the country you live in, and therefore making any legal actions nearly impossible in case of abuse. ...


5

I'm not sure what you mean by "system password". If you're talking about the password to an admin account, or even root, then it's not an issue; FileVault security is completely independent of overall OS security (well, with one exception: if someone subverts the box, installs something like a keylogger, then hands it back to you and captures your FV ...


4

After losing almost my entire afternoon trying to figure out why this was happening, I finally found a workaround. As Ben said before, this is a bug related to FileVault. When you're using FileVault, your LaunchServices database is not read correctly after a reboot. Since it's where your associations (files and URLs) are stored, they are all reverted to the ...


4

This worked for me: Log out of your filevault account Log in as the Administrator (any other user account works, but it is always a good idea to have a separate admin account) in the Terminal: su - <yourusername> will ask for you password Make sure your computer is plugged in or the next step will fail. hdiutil compact *.sparseimage will ask for ...


4

This assumes that the hard drive is physically intact. This came up on the Apple Discussion Boards for 10.5. Put the drive into a 2.5" enclosure and hook it up to another Mac. Use an Admin account (call it user2) to mount user1's FileVault using the following command in Terminal: sudo hdiutil attach /Volumes/UpInFlames/Users/user1/user1.sparsebundle where ...


4

Log out with the Time Machine disk attached. It will first recover disk space, then backup. This is the only method supported by Apple. If you only want to encrypt some files, you can create encrypted disk images using Disk Utility and copy those files there, trashing and secure deleting the originals afterwards. The Sparse Bundle format is the technology ...


4

I had the same issue but it was because "Logout after 60 minutes of inactivity" checkbox was enabled.


4

Entering the following in Terminal will work to implement noatime flag on boot drive with FDE activated as used by FileVault 2 on OS X 10.8 Mountain Lion. First elevate the user to give super user permissions sudo su Then copy and paste the following to create the plist file: cat > /Library/LaunchDaemons/com.nullvision.noatime.plist << DELIM ...


4

Beginning with OS X 10.11 “El Capitan”, you can now paste into the GUI unlock dialog! If you’re using an older OS X, read on. The diskutil is for working with volumes via the terminal in OS X. First, find the UUID for your drive via diskutil list. You should see a section like this: Logical Volume MyAwesomeDrive on disk2s2 ...


3

Restart in Recovery mode again, but this time run Disk Utility, select the system volume in its sidebar, and you should get an "Unlock" option it the toolbar. You can unlock it using yourr regular account password. Then, quit Disk Utility, run Terminal and resetpassword, and you should be able to reset the admin account's password.


3

Lifespan of the physical disk/drive FileVault 1 For the home directory, all files written to the SSD will be 8 MB (the default size of bands within a sparse bundle disk image). Whether writes of those 8 MB bands will cause more or less degradation, than writes without FileVault 1, will depend on factors such as: sizes of files within your home ...


3

These files contain resources required for displaying the boot screen of OS X Lion before loading the actual operating system or in cases there is no system partition (or when it's broken). They contain a flat list of files (no hierarchy), and each file has a name of up to 64 characters. The file format is as follows; all numbers are little endian, i.e. ...


3

I haven't tested this, but I think you can "normalize" the account by removing its HomeDirectory attribute. sudo dscl -f /Volumes/Backup/var/db/dslocal/nodes/Default / -delete /Local/Target/Users/fvtest HomeDirectory (with your username instead of "fvtest".) Note that the attribute names are rather confusing; there are two relating to the home directory, ...


3

If you'd like it to be used in the same manner as FileVault (unencrypted on login, encrypted automatically on logout), just move the data to somewhere in your user homedirectory, get your permissions set up right, and then symlink to the data from the default location. If you just want to make an encrypted archive, you could do that with an encrypted DMG ...


3

You need to try to recover the FileVault disk image; if you can get that back, you can mount it (though you need to supply your old login password to decrypt it). In Mac OS v10.3-10.4, the disk image was a single file; in v10.5, they switched to using a sparse bundle format, which breaks the image into a bunch of "band" files, and I'm pretty sure you need ...


3

SSH runs as a launch daemon on OS X, meaning that when it's turned on it's available whether or not anyone's logged in. It sounds like you have FileVault turned on; if so, that prevents the OS from starting up until a user authenticates and unlocks the system volume. It's not just SSH, it's the entire OS. Basically, FileVault does not allow unattended ...


2

I think you're confused about recommended symmetric vs. asymmetric encryption key lengths. Symmetric ciphers, such as AES, can generally use any number for a key, so 256 bit AES gives you 2^256 possible keys. That's more than one key per every atom in the observable universe. Even with Moore's Law, it would probably take until the heat death of the ...


2

My Macbook Pro 13 inch with retina early 2015 model is configured for both filevault 2 and Windows 10 enterprise with bitlocker enabled. I did a lot of reading and found a couple of guides, one was the one you listed. I think from memory it missed a step needed in El Cap about new security to allow the partition to be created. I had to boot into osx ...


2

I would suggest if you want to use DropBox for cloud storage of any sensitive information that you create a TrueCrypt volume/folder in your DropBox. There are instructions on DropBox on how to do this. In fact, security issues are plaguing DropBox right now in the online media and there are many blogs/articles about using TrueCrypt with DropBox that should ...


2

Sorry... there's no way. SparseBundles are Mac OS X Only. You could boot your Mac from an external USB or FireWire drive and access the files that way. EDIT: Things have changed since I posted this answer years ago and now, apparently Catacombae's DMGExtractor can do this. Thanks to André for mentioning that, it's new to me!


2

Are you using FileVault? When I tried FileVault several months ago, I encountered a strange bug where all of my default application settings would return to factory defaults on restart. Everything worked properly after disabling FileVault.


2

I had this problem and it was solved by logging out and leaving the machine to encrypt the home directory overnight. Are you performing any other large disk copy or file I/O (such as watching a movie etc.?).


2

Apparently DMGExtractor only reads sparseimages and NOT sparsebundles. See this for a kind explanation of the differences: http://www.ehow.com/info_12228366_difference-between-sparse-sparse-bundle.html The read/write speed on encrypted sparseimages is even below EncFS. However the read/write speed on encrypted sparseimages is 10x - 20x times faster. If ...



Only top voted, non community-wiki answers of a minimum length are eligible