file's safety when changing battery

[zoran]

Im taking my early 2015 12" Retina MacBook to the tech to replace the battery. Can he see/steal my files that are in the hardrive by some way? I do have a pass on my user account. Might that mean that they are safe?

 

[usagora]

I believe that Mac model has soldered-on SSD storage, so the tech would not be able to remove it and use an SSD dock/enclosure to connect it to another computer to read it. If it were a removable SSD, they could indeed read it outside your Mac unless you used full disk encryption (e.g. FileVault).

Of course, I'd recommend you take it to a tech you can trust, not one you suspect would be doing anything unethical or illegal in the first place.

 

[zoran]

Is it certain that the SSD cannot be removed?

 

[usagora]

Is it certain that the SSD cannot be removed?

I believe this is your Mac model:

MacBook "Core M" 1.1 12" (Early 2015) Specs (Early 2015, MF855LL/A*, MacBook8,1, A1534, 2746): EveryMac.com

Technical specifications for the MacBook "Core M" 1.1 12" (Early 2015). Dates sold, processor type, memory info, hard drive details, price and more.

everymac.com

As far as I know, it's impossible to access the SSD outside the logic board it's soldered onto. And if it's not impossible, I'd guess it would be extremely, EXTREMELY hard to do. It's not something a casual snoop would be able to do I'm sure.

But, if you're still paranoid about it, why not just move your most sensitive files off your MacBook onto a USB drive or something?

 

[zoran]

Yeah bro... thanks so much for the help!

 

[zoran]

If one boots with an ext drive from the usb-C port can he see my files?

 

[usagora]

If one boots with an ext drive from the usb-C port can he see my files?

Didn't think about that. Haven't tried it myself, but unless your internal SSD is encrypted, then I think they would be able to see its contents if they booted from an external drive (they may not have permission to read/write, though). So, again, if you want to be ultra-safe, offload your sensitive files to an external drive or enable FileVault on your internal SSD.

 

[zoran]

Only FileVault can do the encryption?

 

[zoran]

Is it possible, when booting via the USB-C port, to be able to drop an app in the Applications folder?

 

[kitKAC]

Encrypt your machine with FileVault, and problem solved.

 

[usagora]

Only FileVault can do the encryption?

I don't know, but there's no reason not to use FileVault. Once your system drive is encrypted, a person booting from an external HDD/SDD should not be able to read/write to it unless they know your password to decrypt the drive.

 

[Marsikus]

Alternatively, you can do a full backup and wipe the laptop.