Firmware Password Reset From Inside MacOS Terminal

[MikeGreo]

Is it possible to reset, edit, remove the Firmware Password(i.e. the one that appears with a lock symbol during booting when holding down Command + R, or Alt + R), from within the MacOS booted environment? I have full admin access on MacOS environment.

I was wondering if this can be done with the terminal command "firmwarepasswd", or anything else.

Kind regards

 

[kitKAC]

Did you type "man firmwarepasswd" into Terminal yet?

 

[MikeGreo]

I have, but I am confused as to whether or not these two passwords are related. When I use "firmwarepasswd -check", it says that no firmware password is set. But there is a password set which prevents me from accessing Recovery Mode. The password is not preventing me entering MacOS. Are these two areas the same or different? Can I influence on startup Padlock password, from inside the terminal after MacOS has started?

 

[kitKAC]

Hmm, when you try to get into Recovery does the password screen look like the one in the article?

https://support.apple.com/en-gb/102384

If it does, then you do have a firmware password set. I don't know why "firmwarepasswd -check" would say that there's no password set.

 

[MikeGreo]

Yes, it looks similar to that. Can I remove it from the MacOS terminal using the "firmwarepasswd" commands?

 

[bogdanw]

According to the manual,

sudo firmwarepasswd -delete

should "Delete current firmware password and mode setting"
What Mac are you using?

 

[MikeGreo]

My Macbook Pro is 2017 model with T1 Chip. Updated from Big Sur to Ventura. Can that have anything to do with it?

when I do "sudo firmwarepasswd -delete", I get:

Enter password:


Password incorrect


ERROR | main | Exiting with error: 5

I entered the same password I always enter for sudo or login to the MacOS account. It is admin account.

By the way I was able to generate -unlock seed.
"CASDAS2312312432SASDASD213"

Can that be useful?

 

[bogdanw]

The unlock seed can be used if disable-reset-capability was set.

If you know the firmware password, try to remove it from Recovery.
If you don’t …
“(2011-2017) Apple changed this when they soldered the memory to the logic board. The only way to remove the firmware password was to contact Apple.”
https://mrmacintosh.com/how-to-remove-mac-firmware-password-new-way-if-you-have-a-2018-2020-t2-mac/

For reference:
Apple Support “Enter administrator commands in Terminal on Mac”
https://support.apple.com/guide/terminal/apd5b0b6259-a7d4-4435-947d-0dff528912ba/2.13/mac/13.0
Firmware password protection in an Intel-based Mac
https://support.apple.com/guide/security/sec28382c9ca/web