How to turn on FileVault on a Mac

2 min read · 4 steps · Updated 2 October 2026

FileVault encrypts everything on the Mac's disk. If the Mac is lost or stolen, nobody can read your files without your password, even by removing the drive.

Step by step

1. Open System Settings and click Privacy & Security

   Click the Apple menu in the top left corner and choose System Settings.

   Done

2. Scroll to FileVault and click Turn On

   You may be asked for your password. On Macs with Apple silicon or the T2 chip, data is already encrypted. Turning FileVault on additionally ties that encryption to your password.

   Done

3. Choose a recovery method

   You can allow your iCloud account to unlock the disk, or create a recovery key and not use iCloud. A recovery key is a long code of letters and numbers. Write it down and store it away from the Mac.

   Done

4. Click Continue

   Encryption happens in the background while you work. On newer Macs it is almost immediate.

   Done

Good to know

If you forget your password and lose the recovery method, the data cannot be recovered by anyone, including Apple. Take the recovery step seriously.

FileVault protects a Mac that is switched off or logged out. Lock the screen when you walk away: Control + Command + Q.

Performance is not noticeably affected on any Mac from the last several years.

In short: System Settings, Privacy & Security, FileVault, Turn On, save the recovery key.