Filevault protection if stolen?

Question

Level 1

55 points

Filevault protection if stolen?

Hello, I just wanted to know if when you enable filevault, and then get your Code Of Course, lets say someone steal your computer, even if he/she have access somehow to the computer (this is the question) and hack the password to enter the computer, WILL HE/SHE be able to access the info in the HARDDRIVE in the (password to access, not filevault pass) recovey mode?

Its because recently an iMac was stolen 😐 from a friend, and he didnt activate the filevault, neither had a password for login, and I activated the filevault in his mac book pro, and the question came in..

Thanks for further answers.

MacBook Pro (13-inch, Mid 2012), OS X Mountain Lion (10.8.3)

Posted on Jul 5, 2013 10:14 PM

Reply

Answer 1

Best reply

Kappy

Level 10

361,741 points

Jul 5, 2013 10:19 PM in response to aarondvargas

If someone can access the computer and crack a FileVault Master Password, then they have full access to everything on the computer.

OS X does not have a "recovery mode" similar to an iPhone, but it is possible to restore OS X with or without first erasing the drive if one can subvert a FileVault proteted hard drive.

Reply

Answer 2

aarondvargas Author

Level 1

55 points

Jul 5, 2013 10:24 PM in response to Kappy

ok thanks for quick reply, I know it would be almost impossible t get the Filevault recovery code, although I was just concerned about if someone tries to remove password through the very know process(after you reboot system holding the selected keys). Would that be possible and if it is and manage to remove that password to login, can they access info in harddrive?

Reply

Answer 3

Kappy

Level 10

361,741 points

Jul 5, 2013 10:28 PM in response to aarondvargas

There is no set of keystrokes to circumvent FileVault at startup. With Mountain Lion FileVault is used to encrypt an entire drive with an AES256 key. You cannot just press a few keys and bypass the entire security of FileVault. If that were possible FileVault would be useless.

Reply