FileVault and iCloud

[SpaceJockey]

Greetings. This is my first post here on MacRumors.

I recently purchased a MacBook Air. It is a great laptop and I like it but the OS has changed a bit since I last used it (the last I used was Mac OS X Snow Leopard).

Just now, I was looking to encrypt my local account with FileVault but I got confused when I was prompted to choose if I wanted to have my recovery key stored in iCloud.

How does this work, exactly? If I forget my password, will I need to go to the iCloud website and get the key from there? Where exactly is it stored? Is this even a safe/recommended method?

I will be very grateful for any clarification on this. Thank you!

 

[Planey28]

It means you can use your Apple ID password as the recovery key, instead of a key being generated for you.

 

[SpaceJockey]

It means you can use your Apple ID password as the recovery key, instead of a key being generated for you.

Thank you. I think I understand now.

 

[NoBoMac]

Here's Apple's official help page:

http://support.apple.com/kb/HT4790?viewlocale=en_US&locale=en_US

Bottom line: DO NOT forget your security questions and not have a backup somewhere of your key, otherwise, toast.

Is it safe? Yes. If one believes Apple, they encrypt your recovery key with answers you provide with the security questions and do no store the answers to the security questions anywhere. Hence above warning: Apple knows what security questions you answered, but not the answers, so, can't decrypt the recovery key. And noone else can as well.

ADD: Apple ID recovery/password reset is not available at the initial Filevault login screen, if I recall correctly. Apple ID reset is only available once the drive is unlocked.

 

[bobr1952]

Personally, I like having my own key--and store it inside 1Password. Is that safer than iCloud?--I think so but that is really just a matter of personal preference.