Is FileVault the best encryption solution?

Discussion in 'Mac Apps and Mac App Store' started by Yoms, Apr 22, 2019.

  1. Yoms, Apr 22, 2019
    Last edited: Apr 22, 2019

    Yoms macrumors member

    Joined:
    Jun 1, 2016
    #1
    Hi,

    I'd like to encrypt my whole disk using FileVault on a 2018 MBP (using recovery key and not the iCloud account).

    Is FileVault the best choice? I've read that its encryption algorithm is not state of the art. Or is there a better free alternative?

    Thanks,
     
  2. mj_ macrumors 6502

    mj_

    Joined:
    May 18, 2017
    Location:
    Austin, TX
    #2
    No idea what you read and where, but FileVault 2 uses AES-256-XTS which happens to be one of the strongest encryption algorithms to date. FileVault 1 still relied on AES-128-CBC, which is also considered very safe even in 2019.

    Either way that's a moot point. If you are looking at whole disk filesystem encryption there is no alternative to FileVault.
     
  3. Yoms thread starter macrumors member

    Joined:
    Jun 1, 2016
    #3
    I read 128 instead of 256... But I think I got things mixed up with iCloud encryption.
    Thanks.
     
  4. CoastalOR macrumors 68020

    CoastalOR

    Joined:
    Jan 19, 2015
    Location:
    Oregon, USA
    #4
    The 2018 MBP has the T2 chip which means your files are encrypted already.
    https://support.apple.com/en-us/HT208862
    https://www.apple.com/mac/docs/Apple_T2_Security_Chip_Overview.pdf
    https://support.apple.com/en-us/HT208344
    https://support.apple.com/en-us/HT208198
    https://support.apple.com/en-gb/HT208330
    https://eclecticlight.co/2018/11/21/welcome-to-your-new-mac-living-with-the-t2-chip/
     
  5. Yoms thread starter macrumors member

    Joined:
    Jun 1, 2016
    #5
    Thanks, but at the same time Apple states:
    You should also turn on FileVault for additional security, because without FileVault enabled, your encrypted SSDs automatically mount and decrypt when connected to your Mac.

    Though the SSD in computers that have the Apple T2 Security Chip is encrypted, you should turn on FileVault so that your Mac requires a password to decrypt your data.

    So it means that FileVault is still a worthwhile extra protection :)

    Thanks,
     

Share This Page

4 April 22, 2019