Hello,
I forgot my password and started to freak out.
Luckily, it was possible to easily reset my password, by going into recovery mode, input reset password in terminal, and follow the steps to deactivate osx, and set a new password.
Then all was smooth.
But now I freak out that resetting my password can be done by anyone using this method.
How do you ensure my mac password is not being reset by someone else ?
Thank you
MacBook Air Apple Silicon
Your Mac has a secure boot facility that can not be bypass by the terminal. Its password may be different than your standard login password. Keep in mind, if you setup this utility, and you forget your password or the password file gets corrupted, no one will be able to get back in the machine. And if your data isn't backed up somewhere securely, there is a high probability the data can get lost.
If you are prepared for the risk, here are the directions:
About Startup Security Utility on a Mac with the Apple T2 Security Chip - Apple Support
If you are worried about theft, consider Lojack or Lapcop for your computer. These will install a hidden file that lets you track the Mac in such a way no one can turn off the tracker except you.
Your Mac has a secure boot facility that can not be bypass by the terminal. Its password may be different than your standard login password. Keep in mind, if you setup this utility, and you forget your password or the password file gets corrupted, no one will be able to get back in the machine. And if your data isn't backed up somewhere securely, there is a high probability the data can get lost.
If you are prepared for the risk, here are the directions:
About Startup Security Utility on a Mac with the Apple T2 Security Chip - Apple Support
If you are worried about theft, consider Lojack or Lapcop for your computer. These will install a hidden file that lets you track the Mac in such a way no one can turn off the tracker except you.
Easy: Turn on FileVault and do not forget your login password.
Filevault in some ways I consider is worse than the secure boot facility, because it encrypts your entire hard drive, and makes migration and upgrades very slow if you don't turn it off during those events.
I've never had a problem with it. Encryption is performed in hardware anyway, and cannot be circumvented. You can however turn off FV... which requires authentication.
I've worked in a corporate environment, and Filevault made upgrading very difficult.
Resetpassword terminal
