FileVault Encryption to New APFS Volume

Provided FileVault is already turned on, does any new APFS volume added to the internal MacBook disk also encrypted by FileVault by default? Does the new volume also protected by FileVault if I choose "APFS (Case-sensitive)" and not "APFS (Case-sensitive, Encrypted)" in disk utility?

The reason behind is that I want to avoid 2 layer of passwords and encryptions if possible. If new volume is protected by FileVault anyway, I do not want to create another encryption password.

MacBook Pro

Posted on Jan 12, 2023 7:26 AM

Reply

Similar questions

5 replies

Jan 13, 2023 6:55 AM in response to CN_KAWEB

With a T2 or Apple Silicon Mac, the internal SSD is always hardware encrypted since that is how those systems work. You must authenticate with the security enclave on the computer in order to be able to access anything on the Mac since the security enclave controls access to the encryption keys, otherwise the hardware encryption would mean nothing if the computer unlocked the encryption for everyone. When you put a 2018+ Mac into Target Disk Mode, you will be prompted to authenticate with the security enclave of the Mac in Target Disk Mode in order to unlock the encrypted SSD.


With a T2 or Apple Silicon Mac, enabling Filevault just adds an extra password to the process according to Apple (sorry I cannot find the Apple article which has a one line reference to it and Apple does not explain it any further).


FYI, make sure to always have frequent and regular backups of the computer since there are a lot of ways of losing your data on these systems.

Jan 12, 2023 9:38 AM in response to CN_KAWEB

FileVault really isn’t the encryption process. It is the “magic” that decrypts and logs in using the same login credentials. You can encrypt volumes in a container separately. If you add a volume and encrypt it, I believe it will be a separate password (which can be stored in your login keychain).

Is it a T2 or Apple silicon Mac. Those are always encrypted, but automatically decrypted if you don’t turn on FileVault.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

FileVault Encryption to New APFS Volume

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.