Apple Mac Decrypt Hard Drive

It’s hard thing to discover that a loved one is incapacitated or passed away, and the Mac or Macs they left behind can’t be unlocked to retrieve photos, important financial or legal information, or any of their digital traces. If the main account or any administrative user password is unavailable, a newer Mac may be completely unrecoverable.

  1. Apple Mac Decrypt Hard Drive Windows 7
  2. How To Decrypt Hard Drive
  3. Apple Mac Decrypt Hard Drive Free
  4. Apple Mac Decrypt Hard Drive Windows 8
  5. Apple Mac Decrypt Hard Drive Tool
  6. Apple Mac Decrypt Hard Drive Software

Many times, a person who experiences dementia may have already appointed or had appointed someone with the legal right to access their devices; someone who may know they were facing death or who had planned ahead with a will may have left their gear explicitly to someone, or appointed an executor who has rights. (This is not legal advice, by the way; consult an attorney with any questions about the legality of accessing such hardware.)

Right-click the BitLocker encrypted drive you want to decrypt in main window, then click 'Turn off BitLocker'. Enter the password or recovery key, then click 'Next'. Hasleo BitLocker Anywhere For Mac will now decrypt the contents of the selected drive using BitLocker drive encryption. Nov 06, 2018 Mac computers that have the Apple T2 Security Chip integrate security into both software and hardware to provide encrypted-storage capabilities.Data on the built-in, solid-state drive (SSD) is encrypted using a hardware-accelerated AES engine built into the T2 chip. In the sidebar, select the storage device you want to encrypt. Click the Erase button in the toolbar. Enter a name for the volume. Click the Scheme pop-up menu, then choose GUID Partition Map. Click the Format pop-up menu, then choose an encrypted file system format. Enter and verify a password, then click Choose.

But the right or need to access a Mac doesn’t mean one has the ability, and Apple has designed its systems to prevent its own ability to break through strong protections.

The T2 Security Chip found in newer Macs (see the list of Mac models here) brought iPhone- and iPad-style security and encryption to macOS, including Touch ID on laptops. The Mac’s startup volume is automatically encrypted at rest, separate from the long-running FileVault technology in macOS. (See “How FileVault and the T2 Security Chip work together in newer Macs” for more details.)

The T2 chip on a Mac automatically encrypts the startup drive as a way to improve security dramatically—including rendering a drive’s contents unreadable if a device were lost or stolen. Without a fingerprint on a Touch ID-equipped Mac (for a computer that’s running, logged in, and in the right circumstances) or a password for any Mac, even without FileVault enabled, the contents of the Mac’s drive could be permanently unavailable.

If the Mac in question is one of the above models, skip to “Strategies to work around not having the password,” later in this article.

If it doesn’t have a T2 chip, you can try the following; if not, read on for what won’t work, and then strategies to try without the password.

Use Target Disk Mode or external drive startup

You may be able to mount a Mac as a volume on another Mac without a password using Target Disk Mode—as long as FileVault wasn’t enabled. You may not know if was, so you can try the following if both Macs have a FireWire (older models) or Thunderbolt 2 or 3 port:

  1. Connect the computers.

  2. Restart or startup the Mac you want to mount on the other while holding down the T key.

  3. If it works, a volume icon appears on the other Mac.

If you receive a prompt to enter a password, then either FileVault is enabled or there’s a T2 chip on the computer—or even both.

However, if you don’t have another Mac to try this with or they don’t have compatible ports, you can also set up an external, bootable macOS drive with a version of macOS new enough to start up the computer in question and not too new for an older Mac. (Consult the Mac’s model to check on which system releases work with it.)

Here’s how to boot from an external drive:

  1. With a macOS startup volume installed on an external drive, plug it into the Mac you want to start up.

  2. Either restart the Mac or start it up, holding down the Option key as it powers up.

  3. A roughly formatted display showing available startup drives should appear. Click or use a keyboard to select and boot from that drive.

  4. The internal drive shows up as a volume after macOS starts up.

If you can’t start up from an external drive because you’re prompted for a password or blocked in another fashion, or macOS prompts you for a password to mount the internal drive (as above), you’re stuck.

What won’t work

In nearly every scenario involving either a Mac with a T2 chip, FileVault enabled, or both, you have to have an administrative account’s password, often the main or only account on a Mac:

  • With FileVault turned on with any Mac, a password has to be entered at startup to even start macOS running. Otherwise its startup volume remains unavailable.

  • With the T2 chip and no FileVault, a Mac will boot to the startup screen, but unless you had the password, even though the drive’s contents are available to a user, you’d have to break into macOS to gain access to files. Because the T2 chip restricts starting up with an external drive without making a specific administrative change that requires a password, you won’t even be able to boot off an external drive—and you’d need an account password after that to mount the drive when started up externally, in any case.

  • You might consider removing the hard drive as one strategy. But Macs of the last few years have drives that can’t easily be removed or are impossible to remove at all. Even if you could mount a drive on another device, if FileVault is enabled or it’s a mac with a T2 chip, it’s impossible to decrypt the drive’s contents.

Don’t give up yet, however.

Strategies to work around not having the password

Several strategies can help, some of them absurdly low tech:

Apple mac decrypt hard drive free
  • Check for sticky notes, password books, or other places someone may have written down their password. This is surprisingly common, yet often overlooked. (The best “hackers” in movies always make a joke about it when asked what sophisticated cracking tool they will use: they just find the sticky note.)

  • Did the person ever give you a password as a backup in case they lost or forgot theirs? Check your messages, password manager, or notes.

  • Look for local backups. While startup drives may be encrypted via FileVault or the T2 chip, Time Machine and other backups typically aren’t, unless someone takes an extra step to encrypt the volume. (If they did that, they might also have taken steps to allow someone else to gain access later if they couldn’t.) Look for a drive directly connected to the computer, to another computer on the network, or a Time Capsule, Apple’s discontinued networked Time Machine backup option.

  • Look for online backups. A person may be using a cloud-based backup storage system, like Backblaze or Carbonite, and you may be able to find the password for that if you can’t find their Mac account’s password. Check credit-card bills to see if they’re using such a service.

  • Check iCloud. Again, you might be able to find or figure out their iCloud login, and retrieve photos and synced files from iCloud.

  • Look for other sync services. Dropbox, Google Drive, OneDrive, and other options can sync the contents of folders or nearly an entire drive from a computer to cloud-based storage.

Preparation always helps, too. If you’re reading this column prospectively—before a problem has cropped up—see “How to prepare your digital assets in case of death” for advice on setting up yourself or helping someone else be set up for access when they can’t provide a password.

This Mac 911 article is in response to a question submitted by Macworld reader Janvier.

Ask Mac 911

We’ve compiled a list of the questions we get asked most frequently along with answers and links to columns: read our super FAQ to see if your question is covered. If not, we’re always looking for new problems to solve! Email yours to [email protected] including screen captures as appropriate, and whether you want your full name used. Not every question will be answered, we don’t reply to email, and we cannot provide direct troubleshooting advice.

To protect your files from hackers and thieves, Macs offer excellent encryption features built-in. You can encrypt your entire hard drive, encrypt an external drive, or just create an encrypted container for your most important files.

It’s a better situation than Windows 10, where full disk encryption is only offered on some PCs, and partial encryption depends on third party tools. Mac users don’t need to think about it: if you have a Mac, you have access to powerful encryption.

Encrypt Your Entire System Drive

RELATED:What Is Encryption, and How Does It Work?

The FileVault feature allows you to encrypt your Mac’s entire hard disk. When you enable FileVault, your files are stored on your hard drive in an encrypted, seemingly scrambled format. Someone who gains access to your Mac, removes your hard drive, and attempts to view your files won’t be able to see anything without your encryption key. (Without FileVault enabled, anyone with physical access to your Mac could remove its hard drive and view your files, because they’re stored in an unencrypted form.)

Apple Mac Decrypt Hard Drive Windows 7

You can choose which user accounts have the ability to unlock your disk. When you turn on your Mac, you’ll have to sign in with one of those user accounts before your drive is unlocked. Your drive will be locked again when you shut down your Mac.

To enable FileVault, click the Apple icon on the menu at the top of your screen, select System Preferences, and click the Security & Privacy icon. Click the “Turn On FileVault” option to enable and configure FileVault.

Advertisement

By default, FileVault will ask you for your Apple ID. This allows you to regain access to the drive if you forget the username and password for the local account on your Mac. If you’d rather not tie your encryption to a (potentially hackable) online account, that’s not a problem: you can opt for a recovery key instead. Keep this key somewhere safe, because it’s the only way you can recover your files should you lose access to the local accounts on your Mac with permission to decrypt the drive.

Once you’re done configuring FileVault, your Mac will begin encrypting your drive in the background. This can take days, so consider keeping your Mac awake overnight.

How To Decrypt Hard Drive

Encrypt Removable Devices

With macOS you can also encrypt entire external drives. The contents of the drive will be encrypted with a passphrase you choose, and no one will be able to access them without that passphrase. It functions like BitLocker To Go on Enterprise editions of Windows, but it’s available to all Mac users.

To encrypt a drive, simply open the Finder and connect the drive to your Mac. Ctrl+click or right-click the drive in the Finder sidebar and select the Encrypt option.

Apple Mac Decrypt Hard Drive Free

The disk will be encrypted once you enter your password of choice—be sure to use a secure one! You may have to wait several minutes for the contents of your disk to be encrypted, depending on the size of your drive and its speed.

Don’t lose your password! If you do, you won’t be able to access any files on the encrypted drive.

Encrypt Specific Files With a Disk Image

Apple Mac Decrypt Hard Drive Windows 8

RELATED:How to Create an Encrypted Disk Image to Securely Store Sensitive Files on a Mac

You can encrypt individual files by creating an encrypted file container, or disk image. Whenever you want to work with your encrypted files just mount the disk image and enter your password. The files will be available to use and any files you save to the disk image will be encrypted. When you unmount the disk image, the files will be locked and no one will be able to access them unless they have your encryption password.

Advertisement

This is a simple method for encrypting files. You don’t have to encrypt any entire devices; you just have to use a single container file. Better yet, the encrypted disk image you create can be synchronized online using a service like Dropbox or Google Drive. You’ll have an online copy and can synchronize it between your computers, but no one will be able to access your files without your encryption key. You won’t have to worry about your sensitive data being compromised if you use a secure password.

Follow our guide to creating and using an encrypted disk image for more information. Remember, if you lose your password, you won’t be able to mount your disk image and access the files inside!

Other encryption utilities like the venerable VeraCrypt will also work on a Mac, but you don’t need them as badly as you do on a Windows PC. The above encryption tools are integrated into macOS.

Apple Mac Decrypt Hard Drive Tool

Photo credit: Tanyapatch/Shutterstock.com

Apple Mac Decrypt Hard Drive Software

READ NEXT
  • › What’s the Difference Between APFS, Mac OS Extended (HFS+), and ExFAT?
  • › Hard Disk Passwords Explained: Should You Set One to Secure Your Files?
  • › How to Set up a Guest User Account on macOS
  • › How to Easily Encrypt Files on Windows, Linux, and Mac OS X
  • › Anyone With Your Mac Can Bypass Your Password Unless You Do This
  • › 6 Popular Operating Systems Offering Encryption by Default
  • › Basic Computer Security: How to Protect Yourself from Viruses, Hackers, and Thieves
  • › Why I Switched to Garuda Linux