On my iMac running OS X 10.11.3 I'd like to encrypt as much as possible of the built-in disk -- like that I don't need to worry about replacing/sending in a broken disk.

From a casual few web searches it appears not to be possible to encrypt absolutely everything, so right now my strategy is to partition in the disk to have a large, encrypted data partition.


It's possible to encrypt the entire system volume with FileVault 2 -- open System Preferences -> Security & Privacy pane -> FileVault tab, and click Turn On FileVault. I'll walk you through some setup questions (most important: set up an emergency recovery option, either by linking to your iCloud account or by generating a random key you should write down and store someplace safe), then restart the system and begin encrypting the volume in the background.

This isn't quite full disk encryption, because it leaves the (hidden) Recovery HD partition unencrypted. Recovery HD contains emergency repair/reinstall tools, as well as the booter that's used to unlock and start up from the main (encrypted) volume. But no user data gets stored in Recovery HD, so this isn't a significant weakness.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .