Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

I want to set a master password for the whole machine, but it appears this can be easily bypassed.

It is possible to reset the Mac OS X Password using the OS X installation disk and Password Reset utility.

  1. Isn't this a security flaw?
  2. Can this be stopped by other than encrypting the whole hard disk?
share|improve this question
add comment

1 Answer 1

Mac OS X (and now OS X) has always allowed the installation tools to reset administrator passwords.

Rather than locking the OS which can always be modified, you can either encrypt the OS image using File Vault or use a Firmware password to prevent other OS from booting. Many people use both tactics together for enhanced security.

Setting a Firmware password is straightforward, documented in the system help and can be done via the installation disk or Recovery Partition.

share|improve this answer
1  
Also - Firmware passwords can be reset by trained technicians that have physical access to the hardware. Keep that in mind when you decide what steps you are taking to secure things. –  bmike Jul 31 '12 at 15:16
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.