Regarding additional security features of FileVault on Mac with T2 chip

What are the additional security features if I enable FileVault on a Mac with the T2 chip if the chip is used to encrypt the drive? Is there any impact on performance? Would you please help me to understand.

MacBook Pro

Posted on Jan 19, 2023 3:18 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 19, 2023 8:34 AM

There is no impact on performance (or at least it's not noticeable).


The disk is encrypted with or without FileVault being on. FileVault adds the following ( from Use FileVault to encrypt your Mac startup disk - Apple Support ):

When FileVault is turned on, your Mac requires your user account password to unlock your built-in startup disk and allow your Mac to finish starting up. No user account is permitted to log in automatically.


The following from https://www.macworld.com/article/344206/how-to-encrypt-a-mac-storage-device.html may also help:

Intel Macs with a T2 security chip: Most Intel Mac models released starting in 2018 have a T2 security chip, which is set to always encrypt the drive, even if FileVault is disabled. (There’s a way to disable this, but there’s no reason to.) The Secure Enclave handles all the necessary pieces. FileVault on a T2-equipped Mac protects a Mac’s data at a cold startup. 


Similar questions

1 reply
Question marked as Top-ranking reply

Jan 19, 2023 8:34 AM in response to raihangofur

There is no impact on performance (or at least it's not noticeable).


The disk is encrypted with or without FileVault being on. FileVault adds the following ( from Use FileVault to encrypt your Mac startup disk - Apple Support ):

When FileVault is turned on, your Mac requires your user account password to unlock your built-in startup disk and allow your Mac to finish starting up. No user account is permitted to log in automatically.


The following from https://www.macworld.com/article/344206/how-to-encrypt-a-mac-storage-device.html may also help:

Intel Macs with a T2 security chip: Most Intel Mac models released starting in 2018 have a T2 security chip, which is set to always encrypt the drive, even if FileVault is disabled. (There’s a way to disable this, but there’s no reason to.) The Secure Enclave handles all the necessary pieces. FileVault on a T2-equipped Mac protects a Mac’s data at a cold startup. 


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Regarding additional security features of FileVault on Mac with T2 chip

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.