File Vault default

[jayducharme]

After I installed Tahoe, I noticed that logging in to the computer took seemingly forever (upwards of a minute and a half). It used to be nearly instantaneous. So I went poking around System Settings and noticed that File Vault had somehow turned itself on. So I turned it off and now my Mac is back to swift login.

 

[navaira]

FileVault also ruins headless Macs, because they don’t connect to Internet before you log in, which can’t be done without Internet connection. I had to disable it on my Mac Mini. Before connecting it to a display/keyboard/mouse I was seriously afraid it broke. If even I can’t access my server, that’s a bit too secure, Apple.

 

[yellowhelicopter]

After I installed Tahoe, I noticed that logging in to the computer took seemingly forever (upwards of a minute and a half). It used to be nearly instantaneous. So I went poking around System Settings and noticed that File Vault had somehow turned itself on. So I turned it off and now my Mac is back to swift login.

Hmm, perhaps it just hadn't yet finished encrypting all files. Theoretically, when all is done it should be indistinguishable from a non encrypted system, maybe I'm wrong though.

 

[kitKAC]

After I installed Tahoe, I noticed that logging in to the computer took seemingly forever (upwards of a minute and a half). It used to be nearly instantaneous. So I went poking around System Settings and noticed that File Vault had somehow turned itself on. So I turned it off and now my Mac is back to swift login.

What Mac do you have?

 

[kitKAC]

FileVault also ruins headless Macs, because they don’t connect to Internet before you log in, which can’t be done without Internet connection. I had to disable it on my Mac Mini. Before connecting it to a display/keyboard/mouse I was seriously afraid it broke. If even I can’t access my server, that’s a bit too secure, Apple.

Maybe not, if you've got Ethernet plugged in: https://www.jeffgeerling.com/blog/2025/you-can-finally-manage-macs-filevault-remotely-tahoe

 

[PotentPeas]

Maybe not, if you've got Ethernet plugged in: https://www.jeffgeerling.com/blog/2025/you-can-finally-manage-macs-filevault-remotely-tahoe

Oh I didn't know that, this is great.

My experience has been that the "long log in" is only realized the first time you log in after boot. Do you shut your system down every day? I think Apple's thinking is that people typically don't shut their systems down, they just use the sleep feature.

For a headless Mac, I have noticed a few things (pre-Tahoe).
1. If you install a macOS update, and it reboots as part of that process, you get control back right away, you don't have to visit the terminal physically and unlock it. Because of this, I generally don't have to touch my headless Mac Mini "in person" unless perhaps the power goes out.

2. If you need to reboot for some reason *other* than an update, you can run this command before you reboot to get around the need to physically unlock it "in person".
sudo fdesetup authrestart

 

[BigBlur]

Hmm, perhaps it just hadn't yet finished encrypting all files. Theoretically, when all is done it should be indistinguishable from a non encrypted system, maybe I'm wrong though.

The SSD is always encrypted for Macs with the T2 chip or Apple Silicon, even if you don't use File Vault. (All Macs that support Tahoe have the T2 chip or newer.) Turning on File Vault doesn't encrypt the drive again; it just secures the encryption key and adds an extra layer of protection. But you're right...there should be no difference whether File Vault is on or off since the drive is encrypted either way.

 

[jayducharme]

What Mac do you have?

M2 Max Studio

 

[navaira]

Maybe not, if you've got Ethernet plugged in: https://www.jeffgeerling.com/blog/2025/you-can-finally-manage-macs-filevault-remotely-tahoe

I also have Ethernet plugged in and set as default with wi-fi as secondary. I don’t know why it didn’t connect over Ethernet. 🤷‍♂️

In other news, I have Tahoe-shaped regrets. That OS is not going anywhere near my MBP unless they redesign Finder and Music. I try to avoid big words, but those two are hideous now.

 

[kitKAC]

I also have Ethernet plugged in and set as default with wi-fi as secondary. I don’t know why it didn’t connect over Ethernet. 🤷‍♂️

In other news, I have Tahoe-shaped regrets. That OS is not going anywhere near my MBP unless they redesign Finder and Music. I try to avoid big words, but those two are hideous now.

If you watch the video in the link, there's a few things you need to do get the machine fully accessible again after a full restart.

 

[Fishrrman]

Fishrrman's "Mac Rule Number 7":
NEVER use encryption on a drive unless you have a rock-solid and compelling reason to do so. What if you have an emergency and the encryption prevents you from accessing it?

 

[maflynn]

Fishrrman's "Mac Rule Number 7":
NEVER use encryption on a drive unless you have a rock-solid and compelling reason to do so. What if you have an emergency and the encryption prevents you from accessing it?

FileVauit does not control whether your drive is encrypted or not. Macs with T2 chips (all modern Macs) automatically encrypt the data.

 

[Nada Ting]

Fishrrman's "Mac Rule Number 7":
NEVER use encryption on a drive unless you have a rock-solid and compelling reason to do so. What if you have an emergency and the encryption prevents you from accessing it.

Fishrrman: You are one of the few commenters here who consistently offers knowledgeable and dependable guidance. Would you post the rest of your Mac Rules for those of us who want to run an efficient setup and avoid some of the bugs and glitches that these machines can generate. Thank you.

 

[tkermit]

FileVauit does not control whether your drive is encrypted or not. Macs with T2 chips (all modern Macs) automatically encrypt the data.

To be clear, that only applies to an internal data volume. In any case, recommending against encryption still seems like horrible advice in this day and age.

 

[PotentPeas]

Fishrrman's "Mac Rule Number 7":
NEVER use encryption on a drive unless you have a rock-solid and compelling reason to do so. What if you have an emergency and the encryption prevents you from accessing it?

I'll just get the stuff off of my Time Machine backup (...which is also encrypted...)?
I'd rather make hard for someone who steals my laptop to actually get any personal information off of it.

I just say, keep a physical copy of your recovery key somewhere safe and secure, if you're really worried about not being able to use one of the password mechanisms to unlock the drive.