I would like to change my account password. My account is protected by Filevault (OS X 10.5.6.)
If you change your password while Filevault is active, your login password is simply changed, your home folder is not re-encrypted with the new key. You can log in with the new password because entering the new password unlocks the keychain which contains the old Filevault decryption key which is used to decrypt your home folder. I don't know if this is 100% accurate, I heard it a while ago, in the 10.4 days.
1. Does anybody know how accurate that is?
2. If I switch off Filevault, then re-enable it with a different key, will that work properly? Will I have to delete my old keychains for this to work properly?
3. Does anybody know how to disable Filevault from forcing you to set a master password?
4. Will my new password be both my login password and keychain password?
I'd appreciate answers from people who have experience the technical workings of Filevault or who have done this before. I understand encryption very well, but Apple's implementation is unusual.
If you change your password while Filevault is active, your login password is simply changed, your home folder is not re-encrypted with the new key. You can log in with the new password because entering the new password unlocks the keychain which contains the old Filevault decryption key which is used to decrypt your home folder. I don't know if this is 100% accurate, I heard it a while ago, in the 10.4 days.
1. Does anybody know how accurate that is?
2. If I switch off Filevault, then re-enable it with a different key, will that work properly? Will I have to delete my old keychains for this to work properly?
3. Does anybody know how to disable Filevault from forcing you to set a master password?
4. Will my new password be both my login password and keychain password?
I'd appreciate answers from people who have experience the technical workings of Filevault or who have done this before. I understand encryption very well, but Apple's implementation is unusual.