FireVault is ON: Now what?

Discussion in 'macOS' started by HappyDude20, Jun 29, 2009.

  1. HappyDude20 macrumors 68020

    HappyDude20

    Joined:
    Jul 13, 2008
    Location:
    Los Angeles, Ca
    #1
    I turned on FireVault last night, woke up this morning seeing I needed to log in and that's it.

    Took about 3 hours it said to encrypt everything...but now what?

    Do I have to do like a weekly encryption thing or update it or something ever so often?

    I'm guessing everything on my Mac is now encrypted, but will new stuff coming in be as well?

    Or do I just leave it be and know it'll be working forever?
     
  2. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #2
    FileVault encrypts everything inside your home directory (/Users/username/). You have to do nothing further. It's self-maintaining.
     
  3. KingYaba macrumors 68040

    KingYaba

    Joined:
    Aug 7, 2005
    Location:
    Up the irons
  4. ritsard macrumors regular

    ritsard

    Joined:
    Jun 18, 2009
    Location:
    SF Bay Area, CA
    #4
    Make sure to backup often....if your sparseimage goes bad, recovering stuff would be hard
     
  5. ppc750fx macrumors 65816

    Joined:
    Aug 20, 2008
    #5
    Disable safe sleep, and enable encrypted swap, else there's no point in using FileVault.
     
  6. skye12 macrumors 65816

    skye12

    Joined:
    Nov 11, 2006
    Location:
    Austin, Tx
    #6
    It slows your system down some too. I don't ever want to hassle with it
    personally.
     
  7. bearcatrp macrumors 68000

    Joined:
    Sep 24, 2008
    Location:
    Boon Docks USA
    #7
    I got burned a while back using filevault. never again. There is no reason to encrypt everything. There is software out the to encrypt files and folders. BTW, it will slow your system down due to unencrypting your programs you want to use.
     
  8. revs macrumors regular

    Joined:
    Jun 2, 2008
    Location:
    Worcestershire
    #8
    Only use it if you have to, not just for fun.

    If you use it, make a non-encrypted backup of everything very regularly, otherwise you wont be happy if the encrypted image screws up!
     
  9. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #9
    It doesn't encrypt everything, just the user's home folder. So there's no unencrypting of applications when you go to use them because they're never encrypted. The slow down is negligible. Been using it for years without problems.

    Make a non-encrypted backup? That defeats the purpose completely. With Leopard, the encryption uses a sparse image, so it makes backups nicer. You can also mount the encrypted backup just as easily as any other disk image. I've done it before. FileVault got a bit better on Leopard.
     
  10. MacDawg macrumors P6

    MacDawg

    Joined:
    Mar 20, 2004
    Location:
    "Between the Hedges"
    #10
    I really don't have anything that is that sensitive
    The few things I do want protected I made a password protected .dmg

    I tried File Vault a good while back, and I am sure it is better
    But I found no need for it personally

    Woof, Woof - Dawg [​IMG]
     
  11. Jethryn Freyman macrumors 68020

    Jethryn Freyman

    Joined:
    Aug 9, 2007
    Location:
    Australia
    #11
    ONLY files in your home folder are protected.
     
  12. applesuper macrumors member

    Joined:
    Aug 4, 2009
    #12
    Can you elaborate a bit here?

    Btw, I am confused, in real life does file vault slow down the system or not? Will itbe an option for say my G4 pbook?
     
  13. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #13
    • Safe sleep: System Preferences > Security > General (tab) > Require password to wake this computer from sleep or screen saver.
    • Encrypted swap: System Preferences > Security > General (tab) > Use Secure Virtual Memory check box.
    FileVault does not slow things down in a way you'll notice. Should be fine on your machine.
     
  14. Randman macrumors 65816

    Randman

    Joined:
    Jul 28, 2008
    Location:
    Jacksonville, Fla
    #14
    You're better off creating a encrypted disk image and storing your porn in that than using FileVault.
     
  15. applesuper macrumors member

    Joined:
    Aug 4, 2009
    #15
    why?

    thanks angelwatt. Just wondering does the wake up password have to be strong too? Can they brute force attack it? Cause it would be practical to use a strong filevault pass and a weaker wake up one. Is that possible or am I confusing things?

    why? Btw I don't mind about my porn, pretty softcore stuff :), relatively speaking.
     
  16. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #16
    If you don't use secure virtual memory, then that data is not secure, thus not encrypted and potentially vulnerable. Password protecting from sleep is just a safe guard in case you forget to lock down your machine as you step away from it.

    The wake up password = account password. They aren't separate. That setting merely makes sure you have to enter your account credentials when accessing the machine. FileVault can have a different Master password assigned though.
     
  17. applesuper macrumors member

    Joined:
    Aug 4, 2009
    #17
    Ah ok I see, thanks for clearing this up! Kind of a bummer though as you will need to use a pretty strong account password I suppose since it will be in use by filevault too, and that translates to lots of time spent inputting your filevault/account password, just a strong master password wont be enough.
     
  18. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #18
    Why do you think that? Having FileVault enabled doesn't add to how often you enter your user name and password. It simply encrypts your home directory. You still login with your user name and password when you start the machine and then you're set. Your files are ready to go, no extra password entering.
     
  19. applesuper macrumors member

    Joined:
    Aug 4, 2009
    #19
    Because I currently have a dead simple password in my user account and I don''t use one when waking up from sleep. If do install filevault I will use a very complex one and will have to enable my mac to prompt me for a pass when waking from sleep (often) which will require my inputting the account/filevault pass very frequently. At first sight this seems more time consuming than just picking up my mac and opening up the screen from sleep.

    However I am thinking of just giving it a go (despite the other issue of all the temp files not saved in the home folder that could be potential leaks).

    I just want to try to combine it with something like espionage and I wish that apple would enable remote wipe of a mac as well as an iphone!!!:)
     
  20. Andrew Henry macrumors 6502a

    Joined:
    Mar 4, 2008
    #20
    Never used FileVault, but if I need something that sensitive secured, I put it on my IronKey, which never leaves my pocket or backpack unless it's in use.

    -Andrew
     
  21. angelwatt Moderator emeritus

    angelwatt

    Joined:
    Aug 16, 2005
    Location:
    USA
    #21
    Well it's your choice to turn on the prompt for password when waking. It is more secure though. FileVault isn't responsible for that though. Even with it disabled you can have the system prompt you for your account when waking. If you're really worried about security then entering your account info when waking the machine shouldn't be an issue. It only takes me about 3 or 4 seconds tops.
     
  22. applesuper macrumors member

    Joined:
    Aug 4, 2009
    #22
    very interesting, wasn't aware of that, and they do offer "cloud" services too...should a tad more secure than mobileme...;)
     
  23. Rizvi1 macrumors 6502a

    Joined:
    Mar 29, 2006
    Location:
    Laurel, MD (Baltimore, MD / Washington, DC area)
    #23
    I'm dealing w/ an issue right now actually regarding my MacBook Pro running filevault which now has a damaged screen. I am trying to get all my files out of the home folder and onto another computer so that I can send in the damaged MBP in for repair and if something goes wrong, at least I have all my data.

    I first tried connecting via target mode. My plan was to pull the sparseimage file off entirely but I can't even access that it seems. I can't see anything in the home directory - just shows up empty.

    Then I started up the macbook pro w/ the damaged screen and just left it on the login screen. I was then able to login to it over my wireless w/ my login and password. With that, I was able to access my home folder. I pulled almost everything off of there and then put the damaged MBP into target mode and pulled everything off of the shared folder. Now though, when I try to get back in my damaged MBP over wireless, I can't get into my home directory anymore. I wanted to get back in to get the remaining large items out of my home directory -> movies folder.

    My home directory just shows up empty and when I navigate from Leopard -> Users -> myusername, it just has that red-dash w/ circle icon on the folder. I don't understand what happened, I was able to get everything off of it before, why can't I Get into it now?

    Fortunately I was able to get everything important off so if I can't figure it out, I'll be ok. But it's bothering me. any thoughts?
     
  24. devburke Guest

    Joined:
    Oct 16, 2008
    #24
    FYI, that’s not what safe sleep is.

    Screen shot 2009-09-28 at 3.02.18 AM.png
     
  25. gailflorin macrumors newbie

    Joined:
    Jan 8, 2011
    #25
    I don't see the value of Firevault. How do I disable ? thanks.

    Can you tell me how to disable Firevault?
     

Share This Page