Skip to content

Instantly share code, notes, and snippets.

@NoriSte
Created October 29, 2019 11:00
Show Gist options
  • Save NoriSte/d05fe1ee86a65ca0653c6de297b042d3 to your computer and use it in GitHub Desktop.
Save NoriSte/d05fe1ee86a65ca0653c6de297b042d3 to your computer and use it in GitHub Desktop.
FileVault and user passphrases

To setup a different passphrase for FileVault and for the user (so to use your Mac two different passphrases are required):

  • create a new "Disk Decrypt" user with the passphrase used for FileVault
  • disable FileVault auto-login with $ sudo defaults write /Library/Preferences/com.apple.loginwindow DisableFDEAutoLogin -bool YES
  • remove the current user from the ones that could unlock FileVault with $ sudo fdesetup remove -user USER_NAME
  • make sure the "Disk Decrypt" can't administrate your Mac

That's all 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment