Data theft possible with FileVault enabled?

[hehe299792458]

I wanted to make sure of something: is there any risk of data theft/leak if I send my MacBook Pro out for repairs to a computer shop that I’m not familiar with?
Of course FileVault is enabled, and I have a strong password. But I still read stories of how data leak occurs during computer repairs, and I’m not sure of the specifics of how they occur.

I have a full Time Machine back up, but would still rather not have to wipe and restore if possible.

It’s a display repair for a 2018 MacBook Pro (15 inch) if that matters

 

[idmean]

These leaks usually occur because people do not use FileVault or have trivial passwords. If you have a strong password, you should be safe. But you'll always be on the safer side if you erase your Mac or at least all sensitive data. That said, you should only hand over your Mac to a shop that you trust in the first place.

 

[BrianBaughn]

It’s a display repair for a 2018 MacBook Pro (15 inch) if that matters

I think it does as a lot of repairs would need to boot the system completely to be verified. I suppose getting to the login screen is enough for a display repair.

 

[velocityg4]

You need to give them admin access for repairs. A lot of shops will require this. So, they can verify repairs or run tests. Depending on the problem.

Wipe your Mac. Then hand it over to them. When you get it back. Restore from backup.

 

[idmean]

You need to give them admin access for repairs. A lot of shops will require this. So, they can verify repairs or run tests. Depending on the problem.

Wipe your Mac. Then hand it over to them. When you get it back. Restore from backup.

Why do they need admin access to verify a display repair? This sounds shady. They could always boot the Mac from an external drive. Apple certainly doesn't require your admin access when repairing a screen.

 

[appltech]

If a display is a question – no problems at all. Just refuse when they ask for pass/establish connection.
FileVault can be bypassed only when Mac is unlocked.

 

[collin_]

You can be reasonably sure that nobody could access your data provided that:

• You have FileVault enabled
• You have a realistically uncrackable password (e.g. a 6-word diceware passphrase)
• The computer is shut down or has not been logged into since it was last rebooted

*Note: This is assuming the computer just has a single account. Idk exactly how FileVault works with multi-user setups or standard user vs. admin user. Personally I do use a standard user and admin user setup, so I just made sure that both have secure passwords.

Pretty sure all that is a moot point in this case, though, because Apple does ask for admin access when servicing a computer. I would recommend doing what @velocityg4 suggested.

 

[TimFL1]

Why do they need admin access to verify a display repair? This sounds shady. They could always boot the Mac from an external drive. Apple certainly doesn't require your admin access when repairing a screen.

They always asked me to disable FileVault or leave a password with them when servicing my Macs. The last time was during my keyboard replacement, but they also wanted me to do it for a display repair and battery exchange.

 

[Malus120]

You can be reasonably sure that nobody could access your data provided that:

• You have FileVault enabled
• You have a realistically uncrackable password (e.g. a 6-word diceware passphrase)
• The computer is shut down or has not been logged into since it was last rebooted

*Note: This is assuming the computer just has a single account. Idk exactly how FileVault works with multi-user setups or standard user vs. admin user. Personally I do use a standard user and admin user setup, so I just made sure that both have secure passwords.

Pretty sure all that is a moot point in this case, though, because Apple does ask for admin access when servicing a computer. I would recommend doing what @velocityg4 suggested.

I would add:

• You can be reasonably sure that you're not being actively targeted by nation state level actors

To that list, but otherwise it looks good.

But given that they'll probably want/need admin access, you should wipe your mac if at all possible before the repair.