MAC encrypt external HDD

[etaleb]

Folks - I have FileVault enabled Privacy and settings but given I've added an external HDD, I guess I have to right click and Encrypt in Finder right? I plan to have this drive permanently connected to my Mac as all my media files are in there. Hence, would I have to unlock it every time I unlock or will it automatically show me all folders/files and operate just as my internal SSD? I'm hoping for as seamless of an experience as possible

Thanks

 

[Mitthrawnuruodo]

Encrypt and protect a storage device with a password in Disk Utility on Mac

In Disk Utility on your Mac, protect sensitive information on a storage device by requiring users to enter a password to access its files.

support.apple.com

 

[stradify]

When the encrypted external drive is connected a pop up menu asks for the disks password.
In the pop up window there's an option to store the password in Keychain.
Select that option if you no longer want to be asked for the password when you connect that external hard drive.

 

[etaleb]

When the encrypted external drive is connected a pop up menu asks for the disks password.
In the pop up window there's an option to store the password in Keychain.
Select that option if you no longer want to be asked for the password when you connect that external hard drive.

Thanks. I'm not using APFS Encrypted. Is that fine for most purposes? It seems FileVault will protect me even if somebody extracts my HDD out of the Mac mini and tries 3rd party tools

 

[stradify]

I've encrypted all my drives. It's easy to do, so why not add the extra layer of protection?

 

[etaleb]

I've encrypted all my drives. It's easy to do, so why not add the extra layer of protection?

I read that it slows down performance on external drives and that’s why I did not

 

[stradify]

Easy to determine the effect on Read/Write speeds. Run Amorphous Disk and check the Read/Write speeds with and without encryption. Probably take less than 10 minutes.

 

[Ambrosia7177]

I read that it slows down performance on external drives and that’s why I did not

Unless you have a 5,400 rpm hard-drive, you won't notice any real performance hits.

There is no reason to not encrypt every drive you own - internal or external.

Also, encrypting a drive isn't permanent.

Format your external drive, choose APFS (encrypted), choose a secure password, migrate you data over to the encrypted drive, and if for some reason it doesn't work for you, then you can decrypt it later and run naked.

Try it - you'll like it! ;-)

 

[HDFan]

There is no reason to not encrypt every drive you own - internal or external.

Certainly important if you have sensitive data, particularly on a steal-able laptop. Otherwise just extra overhead which may not affect performance but does create complications when creating backups. If for some reason you lose the key you lose your data. An unnecessary complication unless you absolutely need it.

 

[Ambrosia7177]

Certainly important if you have sensitive data, particularly on a steal-able laptop.

All data is sensitive.

Otherwise just extra overhead which may not affect performance but does create complications when creating backups.

Encryption doesn't create backup issues. I backup my system using Carbon Copy Cloner (CCC) every day, and I run full disk encryption on my Mac, plus all of my external drives are encrypted.

If typing in a password to unlock an encrypted drive is too much of a hassle, then I'm not sure what to say.

If for some reason you lose the key you lose your data. An unnecessary complication unless you absolutely need it.

That's just plain laziness talking....

Why don't you remove the password from your Mac so you won't forget it?

Maybe take the locks off your home, so you won't have to worry about losing your keys?

Laziness and security won't work together.

Not focusing on your privacy and security in 2023 is just plain stupid.

But to each his/her own...

 

[HDFan]

All data is sensitive.

The data in my OS partition isn't sensitive. My media server files aren't sensitive so it is ok if someone sees them. My bank, investment accounts, medical records etc. are sensitive since I don't want anyone else seeing them.

If typing in a password to unlock an encrypted drive is too much of a hassle,

I guess you can type in a 20+ character alphanumeric with symbol passwords into an unlock field when what you typed isn't shown with 100% accuracy. I usually get it but not always.

That's just plain laziness talking....

Not a consolation for someone who has lost all their data.

 

[posguy99]

I read that it slows down performance on external drives and that’s why I did not

External drives interfaced how? Unless you have a 40gb TB3 external, the system is going to be waiting for data from the drive, not the other way around.

 

[Fishrrman]

stradify recommended:
"I've encrypted all my drives. It's easy to do, so why not add the extra layer of protection?"

Because... someday, in a "moment of extreme need", one may try to access data on an encrypted drive... and... then be unable to "get to it".

I have NO drives encrypted, with the exception of a backup partition (with bank stuff on it, etc.) that I leave in my car as an "off-site backup".

I WANT my data to be "easily accessed".

My opinion only.
Others will disagree.
Some will disagree vehemently.

 

[Ambrosia7177]

I guess you can type in a 20+ character alphanumeric with symbol passwords into an unlock field when what you typed isn't shown with 100% accuracy. I usually get it but not always.

Every time I log into this Mac, I have to type 20+ characters that are letters, numbers, and special characters.

A small price to pay.

Not a consolation for someone who has lost all their data.

That's why you have a backup of your password somewhere if you can't remember it.

Advocating not using security because it's "hard" or "you might forget your password" is hardly compelling.

To each his own.

 

[Fishrrman]

"Every time I log into this Mac, I have to type 20+ characters that are letters, numbers, and special characters.
A small price to pay."

20+ characters for the administrative password ??
Brings to mind the old Buffalo Springfield song:
Paranoia strikes deep
Into your life it will creep
It starts when you're always afraid...

 

[Ambrosia7177]

Paranoia strikes deep

Excluding spaces, that is 19 characters right there. ;-)

Maybe that should be your new password?

 

[bogdanw]

Nobody is going to try to crack your password or encrypted drive. They are going to hack you point-blank.

Like this:
KingsPawn malware / ENDOFDAYS iOS 14 zero-click exploit
https://forums.macrumors.com/threads/kingspawn-malware-endofdays-ios-14-zero-click-exploit.2386587/
iOS 16 Zero-Click Exploit PWNYOURHOME
https://forums.macrumors.com/threads/ios-16-zero-click-exploit-pwnyourhome.2387131/
macOS Ventura 13.2.1 Released February 13, 2023
"Apple is aware of a report that this issue may have been actively exploited."
https://support.apple.com/en-us/HT213633
macOS Ventura 13.3.1 Released April 7, 2023
“Apple is aware of a report that this issue may have been actively exploited.”
https://support.apple.com/en-us/HT213721
bonus
3CX desktop app - Apple notarized a North Korean trojan for macOS
https://forums.macrumors.com/thread...ized-a-north-korean-trojan-for-macos.2385323/

 

[Ambrosia7177]

Why anyone is arguing against using encryption or strong passwords in 2023 is beyond me...

Russian hackers, possibly?

 

[bogdanw]

Why anyone is arguing against using encryption or strong passwords in 2023 is beyond me...

Russian hackers, possibly?

You’ve completely missed the point. It was not against, it was pointing out how obsolete is to consider yourself safe & superior for having a long password and an encrypted drive in the current cyber threat landscape. Using “strong” passwords to deter brute-force attacks was the top defense… last century Now hackers are regularly bypassing MFA.

Speaking about macOS passwords, here’s an interesting conversation https://forums.macrumors.com/threads/access-to-macbook-without-known-password.2381019/

Regarding encrypted hard drives, it’s probably the best way for inexperienced users to loose data. Especially on an external hard drive that might get accidentally disconnected → corrupted → unrecoverable.

As this thread is in the Mac Basics section, it will inevitably have someone asking how to stop FileVault in the middle of encrypting for “taking too long”. There are several threads with that question already.

A serious conversation should at least mention VeraCrypt https://www.veracrypt.fr/en/Home.html

 

[HDFan]

Why anyone is arguing against using encryption or strong passwords in 2023 is beyond me...

Because it is unnecessary if the system is in a secure environment, if you don't care if someone sees the data on the system, etc.

 

[posguy99]

Regarding encrypted hard drives, it’s probably the best way for inexperienced users to loose data. Especially on an external hard drive that might get accidentally disconnected → corrupted → unrecoverable.

The problem there is that many people today believe that backups are beneath them.