Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Yoms

macrumors 6502
Original poster
Jun 1, 2016
410
268
Hi,

I'd like to encrypt my whole disk using FileVault on a 2018 MBP (using recovery key and not the iCloud account).

Is FileVault the best choice? I've read that its encryption algorithm is not state of the art. Or is there a better free alternative?

Thanks,
 
Last edited:

mj_

macrumors 68000
May 18, 2017
1,618
1,281
Austin, TX
No idea what you read and where, but FileVault 2 uses AES-256-XTS which happens to be one of the strongest encryption algorithms to date. FileVault 1 still relied on AES-128-CBC, which is also considered very safe even in 2019.

Either way that's a moot point. If you are looking at whole disk filesystem encryption there is no alternative to FileVault.
 
  • Like
Reactions: Fuchal

Yoms

macrumors 6502
Original poster
Jun 1, 2016
410
268
No idea what you read and where, but FileVault 2 uses AES-256-XTS which happens to be one of the strongest encryption algorithms to date. FileVault 1 still relied on AES-128-CBC, which is also considered very safe even in 2019.

Either way that's a moot point. If you are looking at whole disk filesystem encryption there is no alternative to FileVault.

I read 128 instead of 256... But I think I got things mixed up with iCloud encryption.
Thanks.
 

CoastalOR

macrumors 68040
Jan 19, 2015
3,032
1,151
Oregon, USA
I'd like to encrypt my whole disk using FileVault on a 2018 MBP (using recovery key and not the iCloud account).
Is FileVault the best choice? I've read that its encryption algorithm is not state of the art. Or is there a better free alternative?
The 2018 MBP has the T2 chip which means your files are encrypted already.
https://support.apple.com/en-us/HT208862
https://www.apple.com/mac/docs/Apple_T2_Security_Chip_Overview.pdf
https://support.apple.com/en-us/HT208344
https://support.apple.com/en-us/HT208198
https://support.apple.com/en-gb/HT208330
https://eclecticlight.co/2018/11/21/welcome-to-your-new-mac-living-with-the-t2-chip/
 

Yoms

macrumors 6502
Original poster
Jun 1, 2016
410
268

Thanks, but at the same time Apple states:
You should also turn on FileVault for additional security, because without FileVault enabled, your encrypted SSDs automatically mount and decrypt when connected to your Mac.

Though the SSD in computers that have the Apple T2 Security Chip is encrypted, you should turn on FileVault so that your Mac requires a password to decrypt your data.

So it means that FileVault is still a worthwhile extra protection :)

Thanks,
 
  • Like
Reactions: CoastalOR
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.