second user with easy password, is it safe?

[al404]

On my macbook that I use for work I have fileVault enable, I need to add account for a friend that occasionally use my macbook for surfing the web.

His account as a really easy password, could that compromise my macbook ( my user ) data in case I lose it or it is stolen?

 

[Tonsko]

Just give him a difficult one. It's your machine, if he's desperate to use it, at the very least he shouldn't make your system more vulnerable. Particularly if for your livelihood...

Or, better yet, set up your mac as a gateway for his device so that he can just use it without even needing to log into it.

 

[bigddybn]

Couldn't you just create a standard account for him? He won't be able to decrypt your files or make system changes.

 

[KALLT]

When they're just browsing and don't care about keeping their data, then I recommend the guest account. When FileVault is enabled, it boots directly into a kiosk mode for Safari.

Each user account is by default configured to unlock the FileVault volume. So having an easy password would indeed compromise your security. It is possible to disable this for specific accounts.

 

[al404]

ok

When they're just browsing and don't care about keeping their data, then I recommend the guest account. When FileVault is enabled, it boots directly into a kiosk mode for Safari.

Each user account is by default configured to unlock the FileVault volume. So having an easy password would indeed compromise your security. It is possible to disable this for specific accounts.

Thanks, I thought that guest account could be insecure for the machine, I usually disable it

Difficult password is kind of an issue since if I set it for him he will never remember it, ask him to set his password I would not know if difficult

the account would be a standard not admin

 

[Tonsko]

In that case, plug a cable into your mac and enable internet sharing so he can browse the internet on his phone or whatever.

http://osxdaily.com/2012/01/05/enable-internet-sharing-mac-os-x/

If that's not really an option - if he really wants to use it, give him a difficult password and teach him how to remember it. For example, get him to think of his favourite song, and take the first letter of each word or line. So, taking the first letters of each word of the first two lines of 'Nellie the Elephant' would give you a password of: 'TBatcctbaIeaNwhn'. That's quite a good password and yet easy to remember for the person. Don't accept his excuses for potentially reducing your device's security. If he wants to use it, make the effort. Or make him go to an internet cafe. Your choice ofc.

 

[Weaselboy]

Thanks, I thought that guest account could be insecure for the machine, I usually disable it

When you have FV enabled like you do, the guest account works a little differently than normal. What you will see at boot is an option to login to your account and the Guest account. If you click guest, the Mac will reboot to the recovery partition and launch Safari and nothing else. So it is a boot only setup for Safari only on the recovery volume and nothing else can be accessed. It sounds like it would do the trick for your needs. Only thing is your friend won't be able to save bookmarks in Safari since everything is reset with each boot.