3

I have FileVault activated on 10.10. (Mid 2012 MacBook Pro - MPB) I relaized already that there are different sleep modes. autopoweroff and normal Standby. Whenever the MBP goes into Hypernate mode, I have to type in my FileVault password. Whenever it goes to normal Standby, it only have to type in my Account password.

I changed the settings that my MBP hardly goes into autopoweroff mode - only after a long time. Does that mean that when my MBP is in standbymode, its not protected by FileVault?!

3

If you have FileVault encryption enabled on your Mac and your system goes into standby mode, it will save the FileVault encryption keys in the memory so the system can be quickly woken and resume work without needing to unlock the volume again. This feature is convenient, but some people may wish to prevent it from happening in order to ensure maximum security for their systems.

To prevent the system from storing the keys, you need to change a small setting in the system management controller (SMC), which can be done by running the following command in the OS X Terminal program:

sudo pmset -a destroyfvkeyonstandby 1

When you run this command, you will need to supply your password (it will not show), and then restart your computer and the system will no longer store the FileVault keys when it goes into standby mode.

Keep in mind that doing this will require you to enter your FileVault password again when you wake your system from standby mode, but will prevent someone from potentially getting to your hard drive's data if you leave your system in this mode without fully shutting it down.

To undo this setting, simply repeat the command but use a 0 instead of a 1 as the value.

Source: Prevent OS X FileVault keys from being stored in standby mode

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.