FileVault - iCloud Account or Recovery Key?

[richard13]

Hello!

I recently did a clean install of macOS Sierra on both my MacBook Pro and iMac. I usually have FileVault turned on for both but discovered my MBP has it turned on but the iMac is turned off. I don't remember treating either any special way during the re-install process.

My questions are:

When I turn on FileVault on my iMac, is it better to use the Recovery Key method or should I opt for the iCloud account method? Seems like that latter would be much more convenient but I worry that if that account is compromised or Apple gets hacked that I would be vulnerable. The former seems more secure but also could be vulnerable if someone finds the Recovery Key. Thoughts?

Is there any way to tell which method was used once FileVault is turned on? I don't remember being asked to create a Recovery Key on my MBP.

Thanks!

 

[Alrescha]

When I turn on FileVault on my iMac, is it better to use the Recovery Key method or should I opt for the iCloud account method?

Neither - just remember your password...

Seriously, if I forget my password then I am mentally incapacitated and should not be using my computer in the first place.

A.

 

[SaSaSushi]

When I turn on FileVault on my iMac, is it better to use the Recovery Key method or should I opt for the iCloud account method? Seems like that latter would be much more convenient but I worry that if that account is compromised or Apple gets hacked that I would be vulnerable. The former seems more secure but also could be vulnerable if someone finds the Recovery Key. Thoughts?

Better is up to you. The iCloud method is about convenience but I prefer the recovery key myself. Just make sure to keep it secure.

Is there any way to tell which method was used once FileVault is turned on? I don't remember being asked to create a Recovery Key on my MBP.

If you were to forget your password you'd find out.

Neither - just remember your password...

There are only two choices when enabling Filevault, iCloud or recovery key. These are, of course, for use in the event that one forgets their password and needs to unlock and reset it.

 

[Alrescha]

There are only two choices when enabling Filevault, iCloud or recovery key. These are, of course, for use in the event that one forgets their password and needs to unlock and reset it.

You are correct of course, I choose recovery key and then ignore it. In the end, it is just an alternative password. If you cannot remember the first, why would you remember the second?

A.

Yes, I know - humans are not rational creatures and this actually works for some people...