Encryptions

My MacBook HD is encrypted. The backups are done on a non encrypted external drive. Accessing a User's files on the backup show they are encrypted and need passwords when I access them from my MacBook. At least they seem to be encrypted because on the backup one User can not access files of another User on the MacBook without password.


However, I tried to access them from another computer when my MacBook was being repaired and had access without the need of a password - so the backup was not encrypted!


  1. To be safe, should I also encrypt the back up hard drive?
  2. If I encrypt the back up hard drive, can it still be used for automatic Time Machine backups?
  3. If the back up drive is encrypted, can I still go earlier files using Time Machine?
  4. Should I use the same password for the laptop as well as the backup drive?


My understanding was that the encrypted files were un-encrypted on the fly when in use, so copies of the closed files were safe, but clearly that is not the case.

MacBook Pro with Touch Bar

Posted on Jan 14, 2019 4:26 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 14, 2019 8:59 AM


Your understanding is completely correct, and is the reason you should choose "Encrypt backups" as shown below:



You can't encrypt TM backups already created, meaning you will need to begin anew. Choose that option.


You can choose to encrypt the entire backup disk without affecting TM's backup history but it will take a very long time. Expect a few days, minimum.


Specific answers to your questions are as follows:


  1. Yes
  2. Yes. TM will continue and its operation will be unaffected even while the disk is actively encrypting. Until it is finished, only newly backed up files will be encrypted though. Older backups will still be retrievable to anyone sufficiently motivated to retrieve them.
  3. Yes
  4. totally up to you.

Similar questions

1 reply
Question marked as Top-ranking reply

Jan 14, 2019 8:59 AM in response to B-Alm


Your understanding is completely correct, and is the reason you should choose "Encrypt backups" as shown below:



You can't encrypt TM backups already created, meaning you will need to begin anew. Choose that option.


You can choose to encrypt the entire backup disk without affecting TM's backup history but it will take a very long time. Expect a few days, minimum.


Specific answers to your questions are as follows:


  1. Yes
  2. Yes. TM will continue and its operation will be unaffected even while the disk is actively encrypting. Until it is finished, only newly backed up files will be encrypted though. Older backups will still be retrievable to anyone sufficiently motivated to retrieve them.
  3. Yes
  4. totally up to you.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Encryptions

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.