Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

konradsa

macrumors regular
Original poster
Aug 25, 2014
191
10
Did anybody else enable FileVault since it was recommended by the installer? I did, and in retrospect it's great to know my files are encrypted. But I don't think I would have turned it on by myself if not prompted.
 

geoffm33

macrumors 6502
Dec 27, 2010
308
145
I didn't enable it. But I'm glad you started this thread because I really wanted to. Interested to see the responses.
 

Watabou

macrumors 68040
Feb 10, 2008
3,426
759
United States
I enabled it too, and you there is little to no performance hit, FileVault 2 is a lot better than 1. If you haven't tried 2 yet, give it a shot, you rarely ever notice the performance hit.
 

konradsa

macrumors regular
Original poster
Aug 25, 2014
191
10
Yes, I agree. Didn't notice any performance impact. Booting takes a little longer than before, due to the way it needs to decrypt first after entering password before it can load the system, but it's still wicked fast on my 2014 rMBP. But other than that, it's pretty seamless. You shouldn't definitely go for it to protect your data.

Encrypting my files took about 30 mins, but I only have like 40 gigs of user data.
 

Apple_Robert

Contributor
Sep 21, 2012
35,666
52,477
In a van down by the river
I did and found out, that once the drive is encrypted, you can't see your recovery drive anymore. I did not convert my drive before turning on file vault.

I haven't noticed any real performance issues with my stock HDD. It does take about 5 - 7 hrs to encrypt on the stock HDD.

I also noticed that if you follow the setup default, the system doesn't give you a recovery vault key like it otherwise would do, if you turned on vault manually after install.
 

gordon1234

macrumors 6502a
Jun 23, 2010
581
193
I did and found out, that once the drive is encrypted, you can't see your recovery drive anymore. I did not convert my drive before turning on file vault.

I haven't noticed any real performance issues with my stock HDD. It does take about 5 - 7 hrs to encrypt on the stock HDD.

I also noticed that if you follow the setup default, the system doesn't give you a recovery vault key like it otherwise would do, if you turned on vault manually after install.

You can still access your recovery drive just fine, but it won't show up in the drive list if you hold down Option. Instead, just hold down "Command-R" at boot.
 

xiwong

macrumors member
Dec 9, 2013
60
3
I've used Filevault FDE since it came out, and besides being a few seconds slower on the boot and a noticeable amount longer on the shut down, it has been a good experience. Just a couple notes to make:

1. Don't mess with your partition tables after encryption.
2. Boot Camp cannot read encrypted HFS drives
3. If you are doing a clean install, just format in Disk Utility as Mac OS Extended (journaled, encrypted). Now you don't have to spend that time and extra write cycles encrypting your data after installing.
 

spacepawn

macrumors member
Sep 13, 2010
41
4
I did and found out, that once the drive is encrypted, you can't see your recovery drive anymore. I did not convert my drive before turning on file vault.

I haven't noticed any real performance issues with my stock HDD. It does take about 5 - 7 hrs to encrypt on the stock HDD.

I also noticed that if you follow the setup default, the system doesn't give you a recovery vault key like it otherwise would do, if you turned on vault manually after install.

New to file vault and also don't remember having the option of getting a recovery key during install. Anybody remember what the setup says if anything regarding this?
 

Apple_Robert

Contributor
Sep 21, 2012
35,666
52,477
In a van down by the river
New to file vault and also don't remember having the option of getting a recovery key during install. Anybody remember what the setup says if anything regarding this?

There are two default checkboxes during setup. One is to enable FileVault and the other is allow your Apple ID to make changes. The DP builds were the same way. If a person forgets his or her password or has a software issue that prevents the password from being properly recognized, he or she could be in trouble, as the key is your backup.

If you turn on FileVault manually in preferences, you will get the key after the drive is encrypted as well as having the option to store the key with Apple and creating 3 security questions to authorize retrieval of the key.
 

Apple_Robert

Contributor
Sep 21, 2012
35,666
52,477
In a van down by the river
I like the FileVault feature. It gives me another layer of security over my 1Password vault and other important files.

I also turn off the display of the account name at login. So, if someone were to steal my computer, they would have to figure out my login name as well as my password, in order to decrypt the hard drive. And if they were to get that far, they have another layer of passwords to break through on other items.
 

spacepawn

macrumors member
Sep 13, 2010
41
4
There are two default checkboxes during setup. One is to enable FileVault and the other is allow your Apple ID to make changes. The DP builds were the same way. If a person forgets his or her password or has a software issue that prevents the password from being properly recognized, he or she could be in trouble, as the key is your backup.

If you turn on FileVault manually in preferences, you will get the key after the drive is encrypted as well as having the option to store the key with Apple and creating 3 security questions to authorize retrieval of the key.

Thanks for the info, something I noticed is that those 2 defaults contradict themselves because enabling file vault disables the "Allow change password with AppleID" option in the login screen. Did you enable FileVault during install? Its surprises me that Apple basically enabled this by default but didn't give users any of the backup options in case you "forget" your password.
 

Apple_Robert

Contributor
Sep 21, 2012
35,666
52,477
In a van down by the river
Thanks for the info, something I noticed is that those 2 defaults contradict themselves because enabling file vault disables the "Allow change password with AppleID" option in the login screen. Did you enable FileVault during install? Its surprises me that Apple basically enabled this by default but didn't give users any of the backup options in case you "forget" your password.

I did enable during install. However, I turned it off afterward and then proceeded to turn it back on manually in preferences, so that I could get the key.

The chances of your system not recognizing a password you have used over and over is very slim. However, I have seen some cases on here, where people have had that kind of problem. I feel better knowing that if that were to happen to me, I have another retrieval method. And if the worst were to happen software or hardware wise, I keep the HD backed up. And the critical files are backed up in multiple locations.
 

philoouu

macrumors newbie
Nov 13, 2012
12
0
I did enable during install. However, I turned it off afterward and then proceeded to turn it back on manually in preferences, so that I could get the key.

The chances of your system not recognizing a password you have used over and over is very slim. However, I have seen some cases on here, where people have had that kind of problem. I feel better knowing that if that were to happen to me, I have another retrieval method. And if the worst were to happen software or hardware wise, I keep the HD backed up. And the critical files are backed up in multiple locations.

Hello BasicGreatGuy

Thanks for your comment. I basically follow the instructions yesterday when installing Yosemite and turned on automatically the FileVault. After that I realised that I did not get any Recovery Key.
- By reading your comment, I understand that the you did the same way as me, than turned it off and on again the classical way so that you could get a Recovery Key
- What I really do not understand is the option "Allow change password with AppleID" ? What does it mean exactly ? How do you compare that with the classical option when you turn on FileVault and get Recovery Key or Apple Storage with 3 question ?
Thanks in advance for your explanation.
Regards
philoouu
 

richard13

macrumors 6502a
Aug 1, 2008
927
502
Odessa, FL
At first, I was concerned about performance issues with using FileVault. But I've been using it for quite some time now and I don't notice any difference.

With the concerns over theft and privacy I don't really see a reason not to turn it on.
 

jdag

macrumors 6502a
Jun 15, 2012
838
213
I stumbled over this thread as I searched regarding the FileVault recovery key.

I noticed after my drive was encrypted (using the default settings during Yosemite upgrade) that a recovery key should be retained. However, as people have noted here, the install process does not present a key.

Do you think it is a good practice to decrypt, then encrypt manually to get that key or am I over-thinking the need for the key?
 

konradsa

macrumors regular
Original poster
Aug 25, 2014
191
10
I stumbled over this thread as I searched regarding the FileVault recovery key.

I noticed after my drive was encrypted (using the default settings during Yosemite upgrade) that a recovery key should be retained. However, as people have noted here, the install process does not present a key.

Do you think it is a good practice to decrypt, then encrypt manually to get that key or am I over-thinking the need for the key?

I think you are overthinking it. As long as you don't forget the password to your account, no need for a key. And even then, you can still decrypt the drive by connecting to your Apple account. Who knows if you will ever find the key when you need it.
 

philoouu

macrumors newbie
Nov 13, 2012
12
0
I think you are overthinking it. As long as you don't forget the password to your account, no need for a key. And even then, you can still decrypt the drive by connecting to your Apple account. Who knows if you will ever find the key when you need it.

Let us wait what Apple has to say about it. This is not normal that no Recovery was proposed as everybody was waiting for it...
Either it is normal and Apple will explain the new process without recovery or it is not normal and they will fix it !
 

InfiniteLoopy

Cancelled
Dec 14, 2010
366
5
My issue is slightly different:
I never had the FileVault installation screen during installation and am now concerned my installation is corrupt.

I copied the installer onto a usb drive, erased my drive in disk utility (after booting with usb stick, and installed 10.10 straight after.

I did this twice and neither time was prompted to enable FileVault.

10.10 seems to be working fine, but why wasn't I asked like everyone else to enable FileVault?

Could it be my older Mac? Could it be because I did a clean install?

Should I be concerned?
 

AirThis

macrumors 6502a
Mar 6, 2012
518
14
I've had it enabled for about 2 years, never had any issues. It takes about 60 minutes to encrypt 300Gb, so it's not a long process. After migrating to Yosemite, I decrypted the hard drive just to see if performance was better, but it looks identical to me. So I set FV back on.
 

philoouu

macrumors newbie
Nov 13, 2012
12
0
My issue is slightly different:

I never had the FileVault installation screen during installation and am now concerned my installation is corrupt.



I copied the installer onto a usb drive, erased my drive in disk utility (after booting with usb stick, and installed 10.10 straight after.



I did this twice and neither time was prompted to enable FileVault.



10.10 seems to be working fine, but why wasn't I asked like everyone else to enable FileVault?



Could it be my older Mac? Could it be because I did a clean install?



Should I be concerned?


Did not have the FileVault setting option on mini, just on the MacBook...
What is your Mac ?
 

cjmillsnun

macrumors 68020
Aug 28, 2009
2,399
48
My issue is slightly different:
I never had the FileVault installation screen during installation and am now concerned my installation is corrupt.

I copied the installer onto a usb drive, erased my drive in disk utility (after booting with usb stick, and installed 10.10 straight after.

I did this twice and neither time was prompted to enable FileVault.

10.10 seems to be working fine, but why wasn't I asked like everyone else to enable FileVault?

Could it be my older Mac? Could it be because I did a clean install?

Should I be concerned?

It depends on whether your Mac is a laptop or a desktop.

It will ask on MacBooks, MacBook Pros, and MacBook Airs but not on Mac minis, iMacs or Mac Pros.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.