Encrypt Backup, or Encrypt disk or both?

Question

Level 1

29 points

Encrypt Backup, or Encrypt disk or both?

Do I need to do both? Is it the same or good enough to use an encrypted disk without encrypting the backups or is it safer to do both? What else should I consider?

MacBook Pro (2020 and later)

Posted on Dec 21, 2021 4:22 AM

Reply

Answer 1

Best reply

Barney-15E

Level 10

113,590 points

Dec 21, 2021 5:47 AM in response to Stinsonddog

So I think choosing to Encrypt backups merely encrypts the disk and there really IS NOT a choice to do both.

I think I'm now confused as to what you were asking.

Encryption is always full disk. There is no option to encrypt individual items.

You can encrypt the backup disk or not, and that is entirely independent of whether your source is encrypted or not.

You can encrypt the source and the backup.

You can encrypt the source and not the backup.

You can not encrypt the source and encrypt the backup.

You can encrypt neither the source nor the backup.

In any of those cases, when you encrypt, the full disk is encrypted whether it is the source or the backup drive.

Reply

Answer 2

Stinsonddog Author

Level 1

29 points

Dec 21, 2021 8:07 AM in response to etresoft

yes ok agree, yet most don't have this technical level of expertise, and honestly if all this is true, this could be more clearly explained on their page - https://support.apple.com/guide/mac-help/keep-your-time-machine-backup-disk-secure-mh21241/mac

See item 4 on this page which really could explain what's explained in this thread.

https://support.apple.com/guide/mac-help/choose-a-backup-disk-set-encryption-options-mh11421/12.0/mac/12.0

Reply

Answer 3

Stinsonddog Author

Level 1

29 points

Dec 21, 2021 5:41 AM in response to Stinsonddog

So after completing the backup without choosing to Encrypt the disk was not encrypted at all. I have no idea if this is a Monterey thing or this has worked this way all along. But basically when I went back into Time Machine, and tried to set up the same disk and select Encrypt backups this message suggests it basically encrypts the disk, not the individual backups.

So I think choosing to Encrypt backups merely encrypts the disk and there really IS NOT a choice to do both.

Reply

Answer 4

Barney-15E

Level 10

113,590 points

Dec 21, 2021 4:35 AM in response to Stinsonddog

How sensitive is your data?

I encrypt my laptop as it could be easily stolen while out and about, but I don’t encrypt the backups stored at home.

I doubt anybody that snatches my laptop is looking for my banking information. They’re going to sell the Mac.

I don’t encrypt the backups because I don’t want another layer of possible failure, and the risk of my backup being stolen is low.

It is always best to have two backups, and I think it is most definitely required if you encrypt them.

Reply

Answer 5

Stinsonddog Author

Level 1

29 points

Dec 21, 2021 4:55 AM in response to Barney-15E

After formatting and setting a PW if I ask for backups not encrypted, I get a message asking to remove the encryption. I think its worded poorly and I didn't take a screenshot. Now I removed the disk, and plugged it back in. Then started a backup, part way through (I am guessing after it needed to start writing to the disk), it asked for the PW, so maybe its ok. I will let it finish and see if it shows the disk encrypted after it completes. The messaging with the pop ups is not clear.

I guess you confirmed that you have the option to do both.

Reply

Answer 6

Stinsonddog Author

Level 1

29 points

Dec 21, 2021 5:59 AM in response to Barney-15E

Thanks for this clarification and detailed listing. What is confusing is the dialog box in Time Machine. It does NOT say "Encrypt Backup Disk" it says "Encrypt Backups" which led me to believe that the individual backup could be encrypted. I am fine with the full encrypted backup disk.

Reply

Answer 7

etresoft

Level 8

47,580 points

Dec 21, 2021 6:09 AM in response to Stinsonddog

Stinsonddog wrote:

Thanks for this clarification and detailed listing. What is confusing is the dialog box in Time Machine. It does NOT say "Encrypt Backup Disk" it says "Encrypt Backups" which led me to believe that the individual backup could be encrypted. I am fine with the full encrypted backup disk.

You can backup to network locations too. It would then be confusing to say “Encrypt Backup Disk” when only the backups are being encrypted. Technically, it is a virtual disk in this scenario, but this is why Apple prefers to use fewer technical terms.

Reply

Answer 8

Barney-15E

Level 10

113,590 points

Dec 21, 2021 6:15 AM in response to etresoft

You can backup to network locations too. It would then be confusing to say “Encrypt Backup Disk” when only the backups are being encrypted. Technically, it is a virtual disk in this scenario, but this is why Apple prefers to use fewer technical terms.

Forgot about that one.

Reply

Encrypt Backup, or Encrypt disk or both?

Similar questions