FileVault

OS X's encryption service, FileVault, originally stored users' home folder contents in encrypted disk images. In OS X Lion, FileVault now uses Apple's new CoreStorage volume manager to encrypt the entire disk. With CoreStorage, the OS configures a small hidden partition with a preboot welcome screen that looks like the standard OS X log-in window and contains user accounts that are authorized to unlock the volume and cause the system to load and automatically log in to the account specified on the preboot screen.

Unfortunately, while more secure and while offering a relatively seamless experience when sitting at … Read more

FileVault, in OS X Lion and later, is part of a volume management technology called CoreStorage, which includes a full-disk encryption option that functions underneath the operating system, allowing it to be transparent to the operating system's functions and encrypt all data on the drive. This is a convenient way to secure OS X, but in order to work, it does need to have an unencrypted section of the drive that it uses to store the encryption keys for unlocking the drive.

Any drive encrypted with FileVault will have a small hidden partition that contains these keys, and for … Read more

A new feature that Apple has included in Mountain Lion offers a convenient way to encrypt secondary volumes on your Mac, making data security far more convenient.

Recently discovered by Mac OS X Hints contributor "kirkmc," if you right-click a nonboot volume in the Finder, the contextual menu that appears now contains an option to encrypt the disk. Selecting this will bring up a window requesting that you supply a password and a password hint for the drive, and upon doing this, the system will wait a short while (the length of which depends on the amount of … Read more

Last week a security hole in OS X 10.7.3 was uncovered where the account passwords for Lion users who had upgraded from Snow Leopard and who were still using the legacy FileVault encryption scheme were being stored in plain text in system log files. This issue happened apparently because a debugging flag for the OS software had been left enabled in the public release. Following this finding, Apple today issued the next version of OS X Lion, which along with other fixes and tweaks, closes this security hole for these users.

The security hole was found to be … Read more

A security hole has recently been found in the latest version of OS X 10.7.3, through which a user's password may be written to a log file in plain text if that person is using the older legacy FileVault data encryption technology from past versions of OS X.

While the hole may be a problem for a certain group of people who still use the legacy encryption scheme, there are several things that can be done about it.

The hole happened when an Apple software engineer apparently left a debugging flag enabled in the production release of … Read more

MacFixIt Answers is a feature in which we answer questions e-mailed in by our readers.

This week people wrote in with questions managing a persistent warning in Web browsers about local storage when browsing YouTube, what to do about an encrypted hard drive for which you do not have the recovery key or password, managing a bluetooth mouse that keeps losing its connection, and a reader suggestion for a file quarantining bug in OS X Lion. We welcome alternative approaches and views from readers, so if you have any suggestions or alternative approaches to these problems, then post them in … Read more

When a problem arises in OS X because of a software configuration error, often one troubleshooting step to take for clearing the issue or at least investigating it further is to boot into Safe Mode; however, sometimes Safe Mode may not work.

Booting to Safe Mode in OS X is done by holding the Shift key at startup, which triggers a minimal boot environment where only basic Apple-supplied extensions and services are loaded. This will help you determine if problems are happening from peripheral devices or third-party extensions such as those supplied by some security software packages. In addition to … Read more

MacFixIt Answers is a feature in which we answer questions e-mailed in by our readers.

This week people wrote in with questions about the best way to move data from an old user account to a new one, the purpose for the key given to you when you enable FileVault, and how to add new menu extras to the menu bar. Others asked how to manage exceptionally large virtual memory used by programs, and how best to move an OS installation to a new partition. We welcome alternative approaches and views from readers, so if you have any suggestions, post … Read more

Apple's FileVault technology is a method of automatically encrypting your files so you do not have to worry about data theft should your system be stolen. In its first iteration FileVault was just used to encrypt the user's home directory, but in OS X Lion Apple introduced a second-generation full-disk encryption scheme that has been dubbed FileVault 2.

Many people who are considering using FileVault 2 have been asking about questions such as whether or not the encryption is needed, and expressing concerns about its security.