FileVault encryption key - (0 or O) and (1 or I) ?

Does anyone know what convention regarding entering FileVault encryption keys are. I was told long ago that due confusion between some characters like 0 and O that either zeroes or upper case 'o' are not used for File Vault Keys but I don't remember which.

MacBook Pro

Posted on Nov 25, 2022 2:14 AM

Reply
4 replies

Nov 26, 2022 5:26 PM in response to brain_dead

Hello brain_dead,


Welcome to Apple Support Communities!

If we understand your post correctly, you want to know what the FileVault encryption keys are. We're happy to help!


"You can use FileVault to encrypt the information on your Mac. FileVault encodes the data on your startup disk so that unauthorized users can’t access your information. See How does FileVault encryption work?


Note: If you have an iMac Pro or another Mac with an Apple T2 Security Chip, the data on your drive is already encrypted automatically. However, turning on FileVault provides further protection by requiring your login password to decrypt your data.


To set up FileVault, you must be an administrator. When you turn on FileVault, you choose how you want to unlock your startup disk if you ever forget your password:


  • iCloud account and password: This choice is convenient if you use iCloud or plan to set it up—you don’t need to keep track of a separate recovery key.
  • Recovery key: The key is a string of letters and numbers that’s created for you—keep a copy of the key somewhere other than your encrypted startup disk. If you write the key down, be sure to exactly copy the letters and numbers shown. Then keep the key somewhere safe that you’ll remember—but not in the same physical location as your Mac, where it can be discovered. If your Mac is at a business or school, your institution can also set a recovery key to unlock it.


  • WARNING: Don’t forget your recovery key. If you turn on FileVault and then forget your login password and can’t reset it, and you also forget your recovery key, you won’t be able to log in, and your files and settings will be lost forever.

FileVault encryption can’t be used with some highly partitioned disk configurations, such as RAID disk sets.


Important: After you turn on FileVault and the encryption begins, you can’t turn off FileVault until the initial encryption is complete. Encryption can take a long time, depending on the amount of data stored on your computer, but you can continue to use your computer as you normally do. After the encryption process is complete, you can turn off FileVault. If you have an iMac Pro or another Mac with a T2 chip, data on your drive is already encrypted automatically, so FileVault takes less time to complete.

  1. On your Mac, choose Apple menu  > System Settings, click Privacy & Security  in the sidebar, then go to FileVault. (You may need to scroll down.)
  2. Click Turn On next to FileVault.
  3. You might be asked to enter your password.
  4. Choose how to unlock your disk and reset your login password if you forget it:
    • iCloud account: Click “Allow my iCloud account to unlock my disk” if you already use iCloud. Click “Set up my iCloud account to reset my password” if you don’t already use iCloud.
    • Recovery key: Click “Create a recovery key and do not use my iCloud account.” Write down the recovery key and keep it in a safe place.
  1. Click Continue.
  2. If your Mac has additional users, their information is also encrypted. Users unlock the encrypted disk with their login password.
  3. If there’s an Enable Users button, you must enter a user’s login password before they can unlock the encrypted disk. Click Enable Users, select a user, enter the login password, click OK, then click Continue.


Note: If you get an alert message that encryption has been paused, your Mac may have detected a problem that could keep the encryption from completing successfully. For example, if your Mac notebook computer is not plugged into an electrical outlet, the encryption process may pause until the power plug is connected."


Encrypt Mac data with FileVault


Let us know if you have any questions.

Thank you for using Apple Support Communities.

Take care!


Nov 28, 2022 2:58 AM in response to dawngreg08

Thank for replying, I'm using FileVault already and don't store the key on iCloud. So when I write down the key that FileVault provides on paper (and the key contains an 0 or I) I like know what I should be recording. It is not clear looking at a key on the FileVault screen if contain e.g. upper case 'o' or a zero.


An example [but not real] FileVault key is as follows:-

ZXA9-ZUO4-AFKN-8CJ9-QEEC-WEZO

Because we are familiar with the font that Community use we can tell that the last four characters are "WEZO" not "WEZ0" <--last character zero. But on a screen with little text but a key it is up you to determine. I'm sure it is just one of these things that everyone knows e.g. there are no zeros used in the keys so there is no confusion.

Years ago people in IT use to put a stroke thru their zeroes to stop them being used as 'o'.


Anyway thanks your reply.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

FileVault encryption key - (0 or O) and (1 or I) ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.