Turn on FileVault to encrypt the disk
Protect your data if the Mac is lost or stolen.
- System Settings → Privacy & Security → FileVault → Turn On.
- Choose how to regain access: iCloud account or recovery key (note it down precisely and keep it away from the Mac).
- Check the status:
fdesetup status
- Encryption runs in the background, you can keep working.
- On an Apple silicon Mac the disk is already hardware-encrypted: FileVault adds the lock tied to your password.
⚠️ Losing both the password AND the recovery key makes the data unrecoverable.