Root single mode on m1 mac

Hi Franco,

Try these steps to reset the login password and regain access: https://support.apple.com/en-us/HT212190

Single User Mode won't be able to help you recover the user's data. Without the correct password or recovery key, the data is inaccessible. Also, in order to even permit the Mac to boot into Single User Mode, you have to customize or disable System Integrity Protection, and that requires the user's admin password.

If you still want to know how to enable Single User Mode (for reference only), let me know and I can provide the steps on that. Again, it cannot help with breaking into a FileVault-encrypted Mac.

A Recovery Key is one option, but it would need to have been created already. If your client did not generate one, or if it became lost, then it is not an option.

If a user exhausts all the steps in If you forgot your Mac login password - Apple Support, all the way through to and including what to do if you can't reset your password, then the only remaining option is to erase the startup disk. Assuming the user did not avail him or herself of Time Machine or similar backup, then the data on that Mac will remain lost.

Single User mode won't help because the data will remain encrypted.

I need it since an user forgot their password and we do not have a recover key.

Are you expecting Single User mode to circumvent that?

If you forgot your Mac login password - Apple Support

Francou2023 wrote:

This does not answer my question. How do you get to single mode this is a very helpful and critical feature.

Non above can help me since drive is encrypted and get to share drive means you need a password SMH on that one.

Please give steps on single mode via silicone chip.

Thanks in advance.

Single User Mode does exist on M1 Macs— however it requires the security downgrade and using the Recovery Mode to access Terminal.

ref: Use macOS Recovery on a Mac with Apple silicon

Shut down your Mac and Press and hold the power button.

Wait until you see the Apple logo or a spinning globe, Release the power button.

You access Terminal in the macOS Utilities...

In the Recovery app window, choose Utilities > Terminal.

You can also try Press and hold the power button on your Mac until you see “Loading startup options.”

if all else fails you can try —

Revive or restore a Mac with Apple silicon using Apple Configurator - Apple Support

Francou2023 wrote:

Yes please provide steps on single mode remember this is m1 chip machine

Alright. Unfortunately, it won't help recover the user's data, but nonetheless:

1. Modify System Integrity Protection

You need to modify System Integrity Protection (SIP) in order to start up from Single User Mode. Be warned that in doing this, you will be lowering your Mac's boot security policy to Permissive Security.

1. Shut down the M1 Mac.
2. Press and hold the power button (Touch ID) until Startup Options begins to load.
3. If multiple copies of macOS are installed, select the copy of macOS that you want to allow Single User Mode for. Hold down the Option or Control key, and select Always Use. Then, repeat steps 1-2.
4. Select Options and click Continue.
5. If you're prompted for an admin password, try to find some way to circumvent this (e.g. by authenticating through Activation Lock).
6. The main utilities window should now appear. At the top of the screen, select Utilities -> Terminal.
7. Type this command and hit Enter (Return): csrutil enable --without nvram
8. Complete the Terminal prompts as instructed. Terminal won't show any characters as you type the admin password.
9. If successful, Terminal will inform you that System Integrity Protection has been enabled. In reality, the NVRAM protections have been disabled, and you can now restart the Mac.

2. Request Single User Mode

Now that the NVRAM protections provided by SIP are disabled, you can now request Single User Mode.

1. Start up the Mac normally, and log in to an administrator account.
2. Open Terminal, located in Applications -> Utilities.
3. Run this command to request Single User Mode on all future boots: sudo nvram boot-args="-s"
4. Provide the admin password when prompted. Terminal won't show any characters as you type your password.
5. If successful, restart your Mac.

3. While in Single User Mode

If all of the previous steps were successful, the Mac should show white lines of text on a black screen on the next startup. When the root shell is available, use these commands to fully access the drive. Keep in mind that the system volume (the root volume, /) cannot be written to.

1. mount -P 1
2. /usr/libexec/init_data_protection
3. apfs_unlockfv
4. mount -P 2

To instruct the Mac to no longer boot in Single User Mode, run this command: nvram boot-args=""

4. Fully enable System Integrity Protection

Once you are done in Single User Mode, it is strongly recommended to fully enable System Integrity Protection, as it was before. To do this:

1. Complete steps 1-5 in section 1 (Modify System Integrity Protection).
2. The main utilities window should now appear. At the top of the screen, select Utilities -> Startup Security Utility.
3. Select the startup disk that you previously booted into Single User Mode, then click Security Policy.
4. Choose any option(s) other than Permissive Security.
5. Provide the admin password when prompted.
6. When the process is complete, restart the Mac.

Francou2023 wrote:

How do you get to single mode on an m1 mac

This used be a feature in Apple which allow you get to command prompt.

I need it since an user forgot their password and we do not have a recover key.

Thanks

Franco

Forgot Admin password—

Reset your Mac login password - Apple Support

https://support.apple.com/guide/mac-help/reset-your-mac-login-password-mh35902/mac

Change or reset the password of a macOS user account ...

https://support.apple.com/en-us/HT202860

If you encrypted your Mac’s boot disk with FileVault 2 —

this prevents you from using your Apple ID to reset your password

(since the password is used in FileVault’s encryption). Read this Apple support document for more information about FileVault. see "Turn Off FileVault" Button Grayed Out --… - Apple Community

Reset your login password using your Apple ID

Click the arrow next to “reset it using your Apple ID.” If you don't see an arrow , see the Apple Support article If you can't reset your Mac login password. Enter an Apple ID and password, then click Next. Follow the instructions to reset your login password.

Same link as above: https://support.apple.com/en-mide/guide/mac-help/mh35902/mac

If your Apple ID is locked or disabled If your Apple ID is locked or disabled - Apple Support

How to use account recovery when you can’t reset your Apple ID password - Apple Support

Mac startup key combinations - Apple Support

Francou2023 wrote:

How get to utilities if needs password to get there again SMH

Why does Apple make so difficul

Here my last hope can Apple pull out the drive and put into encloser so it becomes and usb so I can copy files from it.

I need solution here not well we do not do that.

Apple you a trillion dollar company surely you have methods to solve this issue

you can Call Customer Support  (800) MY–APPLE (800–692–7753)

or on line  https://getsupport.apple.com/

They are our customer and I am Applle customer and Apple needs help me out here and find a solution that works for me.

You can contact Apple using the Get Support link above.

Francou2023 wrote:

I try them and here are no help. Again I need a solution.

Only provide solution do try throw stuff at wall and see if it works

This is Apple fault they should never gotten rid of single mode.

Once you are in Terminal, copy and paste:

whoami

i suspect this is your root

Can I unencrypted drive by booot up in Linux or Apple usb

No. Not without the password.

This can easily be dome by windows and Linux

So install Windows or Linux or both. That is easily accomplished on a Mac.

Linux is a more secure system and it understand help clients out.

Is that so.

The data too important too loose.

I disagree. Your client's data was so utterly worthless they neglected to use Time Machine... a simple matter of checking a box.

Apple help customers and stop trying to control everthing

And what would Apple's customers say if they found out their file encryption can be circumvented.

So apple the trillion dollar company can not unecrpty its on drive I find that hard to belive

That is your choice.

Again there has be a solution

The solution has been posted several times. Apple provided it. Your client chose not to follow it.