How to Encrypt Your MacBook With FileVault

If your MacBook is lost or stolen, the files stored on it can become accessible unless the drive is encrypted. FileVault is Apple’s built-in full-disk encryption feature that protects your data by encrypting everything stored on your startup disk.

Once enabled, your files remain unreadable without the correct account password or recovery key, even if someone removes the SSD or tries to access the drive from another computer.

For most Mac users, FileVault is one of the most effective security features available because it works quietly in the background after the initial encryption process finishes.

You don’t need additional software, and there is almost no difference in day-to-day use on modern Macs. This guide explains how FileVault works, how to enable it safely, what to expect during encryption, and how to solve common problems that may appear along the way.

What Is FileVault?

FileVault is Apple’s full-disk encryption technology built into macOS. Instead of protecting individual folders or files, it encrypts the entire startup disk.

When your Mac starts, you’ll be prompted to sign in before macOS loads. After authentication, the system decrypts your data automatically while you use the computer. This process happens behind the scenes.

Without the correct credentials, the encrypted drive appears as unreadable data.

FileVault protects:

• Documents
• Photos and videos
• Emails
• Browser data
• Application files
• Downloads
• User accounts
• Cached information

Anyone who gains physical access to your Mac cannot simply remove the drive and read its contents.

Why You Should Enable FileVault

Many people assume a login password is enough. It isn’t.

Without encryption, someone with physical access to a storage drive can often recover files using specialized tools.

FileVault adds another layer of protection by encrypting the storage itself.

Enabling FileVault is especially useful if you:

• Carry your MacBook to work or school
• Travel frequently
• Store financial records
• Save personal photos
• Work with confidential business documents
• Keep client information on your laptop

Even if your Mac never leaves your home, encryption protects your data if the device is stolen during a burglary.

Before You Turn On FileVault

Although enabling FileVault is generally safe, taking a few precautions helps prevent problems later.

Update macOS

Install any available macOS updates before enabling encryption. Updates often include fixes related to storage, security, and system stability.

Back Up Your Mac

Create a complete backup using Time Machine or another trusted backup solution.

While FileVault rarely causes data loss, a backup protects you against unexpected hardware failures or interruptions.

Connect to Power

Encryption can take anywhere from several minutes to many hours depending on:

• SSD speed
• Storage capacity
• Amount of data
• Mac model

Keeping your Mac plugged into power prevents the battery from running low during the process.

Know Your Password

You’ll need your administrator password.

If you’ve forgotten it, reset the password before enabling FileVault.

How FileVault Works

When FileVault is enabled, macOS encrypts every block of data written to the startup disk using strong encryption.

Whenever you save a file:

1. macOS encrypts the data.
2. The encrypted version is written to storage.
3. When you open the file later, macOS decrypts it automatically after you’ve signed in.

You don’t need to manually encrypt or decrypt individual files.

Everything happens automatically.

How to Encrypt Your MacBook With FileVault

The steps differ slightly depending on your version of macOS, but the overall process remains very similar.

On Recent Versions of macOS

1. Open System Settings.
2. Select Privacy & Security.
3. Scroll to FileVault.
4. Click Turn On.
5. Enter your administrator password.
6. Choose how you’d like to recover your data if you forget your password.
7. Confirm your selection.
8. Restart your Mac if prompted.

Your Mac begins encrypting the startup disk shortly afterward.

You can continue using the computer while encryption runs.

On Older Versions of macOS

If you’re using an older release such as Catalina or Mojave:

1. Open System Preferences.
2. Select Security & Privacy.
3. Open the FileVault tab.
4. Click the lock icon.
5. Enter your administrator password.
6. Select Turn On FileVault.
7. Choose a recovery option.
8. Restart the Mac if required.

The encryption process then begins automatically.

Choosing a Recovery Method

One of the most important decisions during setup is selecting how you’ll recover access if you forget your password.

You’ll usually see two options.

Apple Account Recovery

You can use your Apple Account to help unlock your Mac.

Advantages:

• Easier for most users
• No recovery key to store
• Convenient if you already use your Apple Account regularly

Possible drawback:

• Requires access to your Apple Account.

Recovery Key

macOS generates a unique recovery key.

This key can unlock the encrypted drive if you forget your password.

If you choose this option:

• Store it somewhere safe.
• Do not save it only on the encrypted Mac.
• Consider printing it or storing it in a secure password manager.

Losing both your password and recovery key usually means the encrypted data cannot be recovered.

How Long Does Encryption Take?

Encryption time varies considerably.

Some common examples are shown below.

These estimates vary based on:

• SSD performance
• Processor speed
• Available power
• Background activity

Apple silicon Macs generally complete encryption faster than many older Intel models.

Can You Use Your Mac During Encryption?

Yes.

macOS performs encryption in the background.

You may notice:

• Slightly slower performance
• Increased fan activity on Intel Macs
• Higher CPU usage during heavy disk activity

For most users, these effects are temporary.

Once encryption finishes, normal performance usually returns.

How to Check Encryption Progress

You can monitor FileVault status from System Settings.

Open:

System Settings → Privacy & Security → FileVault

The window shows whether encryption is:

• Starting
• In progress
• Complete

You may also see an estimated amount of time remaining, although this estimate can change as encryption continues.

What Happens After Encryption Is Complete?

Once finished:

• Every new file is automatically encrypted.
• Existing files remain encrypted.
• No additional action is required.
• Encryption continues silently whenever data is written to the disk.

You’ll simply use your Mac normally.

Does FileVault Slow Down a Mac?

On modern Macs, most users notice little or no difference.

Apple silicon processors include hardware acceleration for encryption, making FileVault highly efficient.

Older Intel Macs may experience:

• Slightly slower boot times
• Minor performance reductions during intensive disk operations

For everyday activities like browsing, office work, streaming, or coding, the difference is usually small.

Common FileVault Problems and Solutions

FileVault Option Is Grayed Out

Possible causes include:

• You’re not using an administrator account.
• A firmware update is pending.
• Disk configuration prevents enabling FileVault.

Try:

• Signing in as an administrator.
• Restarting the Mac.
• Installing pending macOS updates.

Encryption Appears Stuck

Sometimes the progress percentage doesn’t change for a long time.

This doesn’t necessarily indicate a problem.

Large files and background disk activity can slow progress.

Try:

• Leaving the Mac connected to power.
• Avoiding shutdowns.
• Allowing several more hours before assuming encryption has stalled.

Forgot Your Password

If you enabled Apple Account recovery, use that recovery method.

If you selected a recovery key, enter the key when prompted.

Without either method, recovering encrypted data is generally not possible.

FileVault Won’t Turn On

Possible reasons include:

• Storage errors
• File system corruption
• Unsupported configurations
• Enterprise management restrictions

Running Disk Utility’s First Aid and installing the latest macOS updates may resolve the issue.

Should You Turn FileVault Off?

Most users should leave FileVault enabled.

Disabling it decrypts the entire startup disk, which can also take several hours.

Turning it off may only make sense in situations such as:

• Certain enterprise IT requirements
• Advanced troubleshooting
• Temporary compatibility testing

For everyday personal use, keeping FileVault enabled provides significantly stronger protection if the Mac is lost or stolen.

Best Practices After Enabling FileVault

To get the most from FileVault:

• Keep regular backups with Time Machine or another trusted backup solution.
• Use a strong account password instead of a short or easily guessed one.
• Store your recovery key securely if you chose that option.
• Keep macOS updated with security patches.
• Enable Find My so you can locate or remotely erase a lost Mac.
• Avoid sharing administrator accounts with other users.

These measures work together to improve both security and recoverability.

Common Mistakes to Avoid

Several mistakes can make FileVault less effective or create unnecessary problems.

Avoid:

• Forgetting to back up before enabling encryption.
• Saving the recovery key only on the encrypted Mac.
• Ignoring software updates.
• Assuming a login password alone provides the same protection as encryption.
• Interrupting encryption repeatedly by shutting down the Mac.

Planning ahead helps you avoid losing access to important files.

Final Thoughts

Knowing how to encrypt your MacBook with FileVault is one of the simplest ways to improve the security of your personal and professional data. Once enabled, FileVault encrypts your entire startup disk automatically, making it far more difficult for anyone to access your files if your Mac is lost, stolen, or falls into the wrong hands.

The setup process only takes a few minutes, although the initial encryption may take longer depending on how much data is stored on your Mac. After that, FileVault works quietly in the background with little impact on everyday performance, especially on Apple silicon Macs. If you also maintain regular backups, use a strong password, and keep your recovery method safe, you’ll have a solid foundation for protecting the information stored on your MacBook.

Related Articles

• How to Recover Deleted Files From MacBook Without Time Machine
• How to Use Terminal for Basic Mac Maintenance
• How to Clean System Data Taking Too Much Storage on Mac
• How to Reinstall macOS Without Losing Personal Files