I have a clean install of macOS High Sierra with APFS Encrypted file partition. During install I checked the "decrypt at login" option, but each have a different password. I now want to change my APFS password but I haven't been abled to:

  • "change password" is greyed out in the Disk Utility for my APFS volume.
  • diskutil apfs changePassphrase ... returned an error saying it can't do it.

Any idea how I can do that?

P.S. I also have FileVault turned on, with the same password as my login (so different from the APFS Encryption).


You need to list your disks to find the APFS volume disk where you want to change the password:

sudo diskutil apfs list

Now find the UUID of the cryptographic Disk User:

sudo diskutil apfs listUsers <your APFS volume, like: disk1s1>

Finally you can change the APFS volume password:

sudo diskutil apfs changePassphrase <your APFS volume, like: disk1s1> -user <the Disk User cryptographic UUID, like: 12345678-1234-1234-1234567890AB>
  • 1
    This answer just saved me a headache with an APFS volume that somehow Disk Utility would not let me change a password for. Perhaps because I created it on an older machine? Just wanted to add that in my case I had to act on the ` Type: Local Open Directory User` UUID and it worked like a charm! – Giacomo1968 Nov 9 '18 at 3:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .