Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So I'm debating whether or not I should encrypt my MacBook Pro's HDD. Is the account password enough to keep my files safe? If my MacBook got stolen would the thief be able to access the files?

Would encrypting slow things down significantly?

share|improve this question
up vote 5 down vote accepted

In general, no - setting an admin password is not enough to keep your files safe. If someone has possession of your MBP, it is pretty easy for them to change your account password, and then access any of your unencrypted files. Your keychain is safe, since it cannot be unlocked without the original password.

FileVault 2 (Full Disk Encryption) does not make much of an impact on speed. If security is a concern, it is worth implementing.

share|improve this answer

Without encryption, yes, a malicious actor with physical access to your machine can easily access your files. Permissions only stop users who are abiding by the rules imposed by the OS.

Full disk encryption is fast enough to be basically transparent. It does of course have some cost, but if you want to make it difficult for someone with access to your machine to get at your data full disk encryption is your simplest answer.

share|improve this answer

An alternative to full disk encryption is make a new encrypted disk image file with Disk Utility, and keep your sensitive files in it. While the rest of your files would be still be vulnerable to exposure to someone in possession of your computer or its hard disk, most of us can identify a relatively small subset of files or folders of files that need more protection. Email, financial data, perhaps your calendar, come to mind; most of the rest of the contents of your ~/Library, the system files, applications your music, virtual hard disks and other non-personal files mostly aren't worth encrypting. You might not need to open the 'vault' every session if access to those files isn't your primary mission.

Of course if you manage/store/transport other people's private information on your machine, it is probably what occupies most of your disk space, and you need the best software and physical security available.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.