PrivacyTools.io
FileVault logo
Official website support.apple.com/guide/mac-help/protect-data-on-your-mac-with-filevault-mh11785/mac
Screenshot of the FileVault website

FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.

Our take

FileVault is the most seamless encryption option for Mac users: it is built in, costs nothing, and on Apple silicon hardware the underlying encryption is hardware-enforced at the storage controller level. Recovery can be tied to an iCloud account or a local recovery key, and the choice matters: iCloud recovery means Apple can technically assist law enforcement. Like BitLocker, it is closed-source, so the implementation cannot be independently verified. For most Mac owners it is the right default, but users with strong threat models should consider the iCloud recovery trade-off carefully and choose a local key instead.

Listed in

FileVault alternatives