What if someone steals my MacBook?

[ObliviousFool]

I read there's nothing you can do to trace the serial number and find my Mac only way to track but what if someone boots my password locked and logged into iCloud Mac in recovery mode and just erases the hd with the disc utility? Or will it not let you do that if its signed into an iCloud account and pw locked?

Thanks frens.

 

[DeltaMac]

A firmware password will prevent booting to the recovery system.

 

[ObliviousFool]

A firmware password will prevent booting to the recovery system.

When I bought my used iMac the previous owner had logged out of iCloud but had't cleaned the HD properly. I honestly don't know what the heck he did because there was no password when I logged in, I could't find the disc image at all, and it was saying disc was full when I tried to download Geek Bench. So I just booted in recovery mode, erased the disc (which wasn't even close to full), and reinstalled OS.

Ignorant on firmware passwords will have to look it up in the morning.

 

[ObliviousFool]

Sorry I was falling asleep last night but I just looked it up... been using a Mac since 2004, all my friends come to me for service/troubleshooting, and I honestly had no clue about firmware passwords but just set mine. Feels like a nice level of security but frustrated thieves are likely to toss computer in river. Although I wonder at what point after you hit the power button does "find my" trigger or does the OS need to fully load?

 

[posguy99]

I read there's nothing you can do to trace the serial number and find my Mac only way to track but what if someone boots my password locked and logged into iCloud Mac in recovery mode and just erases the hd with the disc utility? Or will it not let you do that if its signed into an iCloud account and pw locked?

If it's new enough to support activation lock, they can't do anything with it even if they erase it. Make sure you have that enabled.

Are you concerned about someone getting access to your data or getting access to the machine?

 

[ObliviousFool]

If it's new enough to support activation lock, they can't do anything with it even if they erase it. Make sure you have that enabled.

Are you concerned about someone getting access to your data or getting access to the machine?

Don't care about data just want extra means of hardware recovery. I don't really understand Activation Lock. So computers without Apple Silicon or T2 security chip can just be logged out of iCloud with no issue rendering Find My useless? I'm assuming you would still need access to the Mac OS user account password to do that though right?

Seems like without activation lock all you need to do is make sure no one can log into the OS and there's a firmware password right?

 

[chabig]

I think you might be making this too complicated.

1) If FileVault is enabled, your data is safe on all Macs. On Macs without T2 or Apple Silicon and without a firmware password, a thief can erase your hard drive, reinstall macOS, and use the machine normally. Setting a firmware password prevents that.

2) Only T2 and Apple Silicon Macs support activation lock. Activation lock turns a stolen Mac into a paperweight, just like with iPhones, lessening the value to thieves. The machine is useless to thieves and can only be used for parts.

3) Find My is the only feature that helps you track lost Macs.

If your Mac is lost or stolen - Apple Support

If your Mac goes missing, these steps might help you find it and protect your information.

support.apple.com

 

[ObliviousFool]

I think you might be making this too complicated.

1) If FileVault is enabled, your data is safe on all Macs. On Macs without T2 or Apple Silicon and without a firmware password, a thief can erase your hard drive, reinstall macOS, and use the machine normally. Setting a firmware password prevents that.

2) Only T2 and Apple Silicon Macs support activation lock. Activation lock turns a stolen Mac into a paperweight, just like with iPhones, lessening the value to thieves. The machine is useless to thieves and can only be used for parts.

3) Find My is the only feature that helps you track lost Macs.

If your Mac is lost or stolen - Apple Support

If your Mac goes missing, these steps might help you find it and protect your information.

support.apple.com

If a NON activation lock Mac has a firmware password and an OS user account password would it also be a brick to a thief?

 

[chabig]

If a NON activation lock Mac has a firmware password and an OS user account password wouldn't also be a brick to a thief?

Yes, generally it will be a brick. On some older Macs there were ways around the firmware password so it really depends on which machine you own.

 

[ObliviousFool]

Yes, generally it will be a brick. On some older Macs there were ways around the firmware password so it really depends on which machine you own.

Right on... I just saw a Luke Miani video where he buys a bunch of old iMac's and half of them were firmware locked. He explained and demonstrated the method you can use to clear the PW on older models, but mine is 2019 so unless they figure something else out that gives me some peace of mind. Thanks

 

[chabig]

Right. The firmware password on 2019 machines cannot be bypassed.

 

[hobowankenobi]

As an aside...if a modern Mac has been added to an MDM service via Apple School Manager or Apple Business Manager, they can be tracked fairly easily via network info, and erased remotely, along with lots of other options. Very handy to find missing gear, secure it and possibly recover it.

There are retail tools for consumers too, both paid premium stuff that has been around for years, and other basic/freemium options.

 

[avz]

I think my M1 MBP will not allow to boot into recovery unless you know a password. I am not sure if it makes firmware password redundant or if there is a way to boot from the USB installer and erase and reinstall the OS.

 

[avz]

Right on... I just saw a Luke Miani video where he buys a bunch of old iMac's and half of them were firmware locked. He explained and demonstrated the method you can use to clear the PW on older models, but mine is 2019 so unless they figure something else out that gives me some peace of mind. Thanks

This is a good tip but it is only applicable to Macs which are now priced at $10-50 each, hence a bunch of Macs in this video. Not worth it for the 90% of the people.

 

[chabig]

I think my M1 MBP will not allow to boot into recovery unless you know a password. I am not sure if it makes firmware password redundant or if there is a way to boot from the USB installer and erase and reinstall the OS.

M1 Macs don't have a firmware password. For the equivalent level of security on a Mac with Apple silicon, simply turn on FileVault.

Set a firmware password on your Mac - Apple Support

When you set a firmware password, users who don't have the password can't start up from any disk other than the designated startup disk.

support.apple.com

An Intel Mac with a firmware password cannot be booted to an external disk. M1 Macs can only boot to known external disks. A thief couldn't connect a random drive and boot from it.

 

[zarathu]

It doesn’t help finding your mac....but if you take out insurance from a major insurance firm like
Allstate, you can get it replaced. For a $2500 mac this costs about $40 a year.