Clarification of how encrypted filevault drives can be unlocked

Those methods are for if you forget your login password.

FileVault isn't specifically the encryption, but how you enable users to login and decrypt in the same authentication.

Each authorized user decrypts using their login password.

jhugery wrote:

As I understand it, when enabling file vault, the user can choose to store the key in their icloud or use a key code. THere is also a setting (once the drive is encrypted) to allow another user on the system to decrypt the drive. Here's my question. If user A encrypts the drive and chooses to store the key in their iCloud AND gives User B on the same system the permission to unlock the drive. If user A is gone (for some reason) and the system becomes locked, how can user B unlock the file system to access the data?

You're over-thinking it. 90% of the complexity of these systems is due to the fact that 10% of customers cause 90% of support problems.

FileVault is simply the ability to encrypt the startup drive. All users have the ability to start up the computer with their password. It's as simple as that.

But anytime the topic is encryption, the problem is always the same:

Customer: I forgot my password. Can you fix it for me?

Apple: Well, if we could do that, then our encryption would be worthless.

Customer: It's Apple support that's worthless!!!

Just don't forget your password and you'll be fine.