0

I want to lock FileVault when I logout. I have two accounts on my Mac one admin and a standard user, only the admin account can open the FileVault. How do I lock FileVault so I need to unlock the FileVault when I logout of any of the two accounts?

As of now I only need to open the FileVault when I have restarted the computer. I use macOS Sierra public beta.

  • 1
    You don't. If you're already logged in, you've already unlocked FileVault. – At0mic Aug 31 '16 at 21:48
  • I want to lock FileVault. @IronCraftMan – Niklas Aug 31 '16 at 21:51
  • What is your target purpose? Do you want FileVault to ask you your password before beginning any new session? Or do you want to be sure that nothing is accessible in clear on your Mac once any session is terminated? – dan Sep 1 '16 at 7:44
  • @klanomath: I liked your version. – dan Sep 1 '16 at 7:48
  • @danielAzuelos Lets say that I close the lid on my MacBook, and if I haven't opened it after a certain time (let's say 60 min) I want the system to lock FileVault. So if I go to bed I want to wake up to the FileVault promt. – Niklas Sep 1 '16 at 8:05
1

There is a non-graphical setting you can try:

sudo pmset -a destroyfvkeyonstandby 1

That would mean that you need to re-authenticate after sleep transitions to standby. It isn't something that changes at logout, but it's the closest I think you can get at present.

| improve this answer | |
  • If I understood right this storing in NVRAM of the FileVault key will just force the session manager to ask it, but the disk is unencrypted mounted. – dan Sep 1 '16 at 7:53
  • @danielAzuelos You are correct - that's the closest I know how to get if you don't restart the Mac (or power it down). – bmike Sep 1 '16 at 21:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .