Password protect cloned external harddrive using CCC

[-mattias-]

I've got two external harddrives, I once a month make backups of my harddrive to. If I boot from the clones, I have to enter the password for my user to login, but if I just plug the externals to my MBP and open them in Finder, I do not need to enter any password at all. I do not like this, as in case they're stolen, then someone will have access to all my data.

I believe, I previously formatted the external harddrives as HFS+ with encryption which did the job, but this is not possible anymore with Catalina.

So any suggestions about how this can be done? I've tried FileVault encryption, but that did not seem to require a password. And am I correct, if I say it is better to format the externals as APFS rather than HPS+ now?

 

[chrfr]

I've got two external harddrives, I once a month make backups of my harddrive to. If I boot from the clones, I have to enter the password for my user to login, but if I just plug the externals to my MBP and open them in Finder, I do not need to enter any password at all. I do not like this, as in case they're stolen, then someone will have access to all my data.

I believe, I previously formatted the external harddrives as HFS+ with encryption which did the job, but this is not possible anymore with Catalina.

So any suggestions about how this can be done? I've tried FileVault encryption, but that did not seem to require a password. And am I correct, if I say it is better to format the externals as APFS rather than HPS+ now?

FileVault does require a password to mount the drive but you can save the password in your keychain so the drive will mount automatically on your own computer.

 

[chabig]

If I boot from the clones, I have to enter the password for my user to login, but if I just plug the externals to my MBP and open them in Finder, I do not need to enter any password at all.

You’re fine. When you boot from encrypted drives, you must enter the password. But when your computer mounts an encrypted it already knows the password. Anyone who stole your hard drive and didn’t have the password wouldn’t be able to mount it as you do.

 

[junkw]

is there an entry for password for your external drive in the Keychain?
[automerge]1577284825[/automerge]
to make sure your external drive is currently encrypted,
reboot and hold ALT key and select your EXTERNAL drive to boot on.
Once booted go to Preferences > Security > Filevault and verify that filevault is activated
This will make sure your EXTERNAL drive is encrypted
[automerge]1577285096[/automerge]
Is your INTERNAL drive APFS or HFS?

 

[-mattias-]

FileVault does require a password to mount the drive but you can save the password in your keychain so the drive will mount automatically on your own computer.

That was exactly the problem, thanks a lot!