Enabling FileVault during initial installation.

[Populus]

I remember I had a 2017 Kaby Lake MacBook Pro for a couple of weeks, or was it an M1 MBA? where during the initial setup, when it asks you about your language and location and Apple ID, and other preferences such as Screen Time, there was a point where it asked you if you wanted to encrypt your storage/MacBook. I guess, using FileVault. But it was part of the initial setup, before everything regarding your Apple Account was downloaded to the mac.


After that, I’ve never seen it again during an initial setup, not even with my recent M4 Mac mini.

Have you recently seen this prompt during the initial configuration of Sequoia? Do you think there is something that may trigger it?

I usually prefer to do all of this during the initial configuration, and this includes enabling FileVault even before I enter my Apple ID.

 

[Bigwaff]

All current Apple Silicon Macs encrypt internal storage by default using random key stored on chip in secure enclave. This make asking to encrypt disk during setup unnecessary. You can still enable File Vault, but File Vault now encrypt the key itself, not the disk.

 

[Populus]

All current Apple Silicon Macs encrypt internal storage by default using random key stored on chip in secure enclave. This make asking to encrypt disk during setup unnecessary. You can still enable File Vault, but File Vault now encrypt the key itself, not the disk.

Ohhh Interesting! So even if I don’t encrypt the unique key of the Secure Enclave, if erase the internal SSD and sell it to someone else, they won’t be able to retrieve any deleted file using forensic tools?

Is enabling FileVault 2.0 useless with current Macs?

 

[Bigwaff]

they won’t be able to retrieve any deleted file using forensic tools?

Correct.

Is enabling FileVault 2.0 useless with current Macs

No. When enabled, File Vault requires one to enter password on boot to decrypt key, and subsequently disk. This one more layer of security.