You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
I cleaned and installed OS X and then I found disk password (like a account) just after booting. What is disk password and I'd like to know what to do for the password?
Thanks
MacBook Pro with Retina display, OS X Yosemite (10.10.5)
Hi jeunghun,
The reason why Disk Password is showing up as a user is because you formatted your volume as APFS (Encrypted). To do this, your volume had to be encrypted by a password. When you installed macOS onto the volume, FileVault recognized that the volume was already encrypted and that only the disk password you set earlier could unlock it. Hence, the disk password became a user on the FileVault unlock screen. Later, when you added users to the volume, FileVault used their passwords as additional keys to the volume and added them as users to the FileVault unlock screen. Now, both your disk password that you set earlier and the users on that volume can unlock FileVault. If you log in using Disk Password, you'll get sent to the login screen since Disk Password isn't a real user.
If you format your volume as APFS (not encrypted), and then later use FileVault to encrypt your volume, FileVault will nondestructively convert your volume to APFS (Encrypted) and only use user passwords (and the recovery key) as keys that can unlock the volume. Turning off FileVault will revert your volume to APFS (not encrypted).
To remove Disk Password, log in as an administrator and enter sudo fdesetup list in Terminal. You'll be prompted for your password (Terminal will not show characters while you type your password). Enter your password and hit Return. Terminal will list all users that are authorized to unlock FileVault. Then, use one of these commands to remove the Disk Password user:
sudo fdesetup remove -user (insert username to remove here)
sudo fdesetup remove -uuid (insert uuid of disk password user here)
Hope this helps!
Hi jeunghun,
The reason why Disk Password is showing up as a user is because you formatted your volume as APFS (Encrypted). To do this, your volume had to be encrypted by a password. When you installed macOS onto the volume, FileVault recognized that the volume was already encrypted and that only the disk password you set earlier could unlock it. Hence, the disk password became a user on the FileVault unlock screen. Later, when you added users to the volume, FileVault used their passwords as additional keys to the volume and added them as users to the FileVault unlock screen. Now, both your disk password that you set earlier and the users on that volume can unlock FileVault. If you log in using Disk Password, you'll get sent to the login screen since Disk Password isn't a real user.
If you format your volume as APFS (not encrypted), and then later use FileVault to encrypt your volume, FileVault will nondestructively convert your volume to APFS (Encrypted) and only use user passwords (and the recovery key) as keys that can unlock the volume. Turning off FileVault will revert your volume to APFS (not encrypted).
To remove Disk Password, log in as an administrator and enter sudo fdesetup list in Terminal. You'll be prompted for your password (Terminal will not show characters while you type your password). Enter your password and hit Return. Terminal will list all users that are authorized to unlock FileVault. Then, use one of these commands to remove the Disk Password user:
sudo fdesetup remove -user (insert username to remove here)
sudo fdesetup remove -uuid (insert uuid of disk password user here)
Hope this helps!
Sorry too late.
It had been my first time to format the internal disk since I got my MacBook from factory.
Before I formatted it, I noted the volume's file format was "APFS (Encrypted)" and just followed that and I am pretty sure that there was no "disk password" in login screen. But after I formatted it with APFS (Encrypted), I just found it. So now I am confused with that.
And I can't found the difference between the login options. I just logged with my account only and with my account after disk password. Do I have to login into disk password first?
You said the article, sorry but I have no idea of why and when do I use it. I would like to know what volume's format they use normally.
sudo fdesetup list only shows a user which is an administrator(I had made only one account).
And when I do sudo fdesetup remove -user myaccount, terminal says "Error: Unable to remove user 'myaccount' (25: User could not be removed because it's the last OS user on the volume.)."
If all else fails, you could turn off FileVault and decrypt your startup disk, then enable FileVault again. This will remove the Disk Password user on the FileVault login screen.
Is your Mac asking for the FileVault password? Only you can know what it is.
Why I see disk password just after booting?
