3 ms·
> Filevault for MacOS (which is wonderful and never sends your key to be kept somewhere else) Did you read the documentation? https://support.apple.com/guide
by j16sdiz 4mo ago
> Filevault for MacOS (which is wonderful and never sends your key to be kept somewhere else)
Did you read the documentation?
https://support.apple.com/guide/mac-help/protect-data-on-your-mac-with-filevault-mh11785/mac https://support.apple.com/guide/mac-help/protect-data-on-you...
"iCloud account: Click “Allow my iCloud account to unlock my disk” if you already use iCloud. Click “Set up my iCloud account to reset my password” if you don’t already use iCloud."
https://developer.apple.com/documentation/devicemanagement/fderecoverykeyescrow https://developer.apple.com/documentation/devicemanagement/f...
"FileVault Full Disk Encryption (FDE) recovery keys are, by default, sent to Apple if the user requests them. Only one payload of this type is allowed per system."
- dijit 4mo agoCan. If you click "Allow my iCloud account to unlock my disk", your recovery key is escrowed to Apple, tied to your Apple Account. If you don't select that option it never does. I should have said "without your explicit permission", but I assumed we were all adults and understood that. The main point is that it's using your account password to unlock, the recovery key is for if you forget your account password.
- dcrazy 4mo agoNo, you were just plain wrong. You said “never”, when in reality BitLocker and FileVault both have optional escrow.