How come MacBooks come as APFS (Encrypted) from the factory but don’t require the key? How can I replicate this?
If you were to manually erase the drive as APFS (Encrypted), then the encryption key would be required first in order to unlock the drive, and then the user password. But, this is not the case with factory fresh deviecs. Right? But in the case of a new MacBook, it is already APFS (Encrypted) and doesn’t require the encryption key.
Also, what is the key in that case?
How can I achieve the same effect (APFS Encrypted without asking the key before logging in)?