Apple state:

Only Apple retail stores or Apple Authorized Service Providers can unlock these computers protected by a firmware password.

If you cannot remember the firmware password for your MacBook Air, schedule a service appointment with either an Apple Retail Store or an Apple Authorized Service Provider. If you plan to visit an Apple Retail store please make a reservation at the Genius Bar using http://www.apple.com/retail/geniusbar/ (available in some countries only).

What do such engineers do to recover or reset the firmware password? I long ago forgot my MacBook Air's firmware password, but haven't needed it until now. I'm quite comfortable opening up my laptop, even if it voids my warranty, but cannot find any information on how the reset is performed.

With older models, one needed only to change the hardware configuration (e.g. amount of installed RAM) and then reset PRAM three times to force a reset of the firmware password. I presume this is not possible because the MacBook Air has no user-removable parts (since RAM is soldered to the motherboard, for example) but it is not clear what alternatives exist.

Apple probably require all those in the know to keep it to themselves, but no doubt some hacker has figured it out. I'd be grateful if they would share!

  • @oemb1905: Interesting approach, but I'm pretty sure that Apple engineers don't replace the EFI chip—so not really an answer to this question.
    – eggyal
    Oct 12, 2015 at 20:40
  • That's why it is just a comment ... people visiting this page, might find that resource helpful. Regards ...
    – oemb1905
    Oct 13, 2015 at 1:31

2 Answers 2


It's not the sort of thing a hacker can easily "figure out" -- as I understand it, the procedure involves calling Apple's Service Provider Support, proving you're an authorized service provider, reading them a code from the computer and typing in the countercode they give you...

Mind you, that doesn't mean you're out of luck. If you have admin access, and a 10.6.x install DVD or USB key for your Mac, this MacEnterprise posting has instructions to use setregproptool to enable/disable the firmware password. If you have Lion, it's probably on the recovery partition somewhere, but I haven't investigated.

  • That's very interesting - and assuringly secure (provided that they require some sort of identity verification as part of the process, and assuming the algorithm cannot easily be hacked). Sadly, the setregproptool requires the current password on my machine, so this tip doesn't work for me. I will take it into an Apple store.
    – eggyal
    Dec 4, 2011 at 9:31
  • Do you already know how to get or bypass the firmware password on MacBooks Air? In my city there is no any Apple retail stores or Apple Authorized Service Providers and I will not take an airplane just for that. If you know how to do it I would be very thankful of hearing it. Thanks in advance.
    – user19645
    Mar 4, 2012 at 23:10

An AASP does by no means 'bypass' the Firmware Password, it is simply removed with a tool specific for that exact machine. A specific Key combination is used on the Firmware Password screen on the Mac that needs it removed, this presents a unique Hash code on the screen of the Mac. Generally this Hash code needs to be sent to Apple Technical Service Provider Support, they will send the AASP the unique 'file' that is used to remove the password from that specific machine.

There is no 'Home' solution yet for the removal of these kind of passwords on updated models, an AASP or a Apple Store can do it for you.

  • Thank you for this information - I had pretty much reached the conclusion that it must be something along these lines. I am however surprised that nobody has yet cracked (at least, not publicly) the generation of this 'file' so as to remove Apple from the equation.
    – eggyal
    May 30, 2012 at 12:10
  • there is most likely a requirement of the file needing to be signed with the master key only kept in the mothership Aug 24, 2012 at 20:44
  • @ThorbjørnRavnAndersen: Agreed. But if that were the case, the mechanism could be published without affecting its security (indeed, it would give people considerable confidence in their firmware passwords, hitherto assumed to be easily bypassed). And useful master keys have leaked / been cracked in the past: HDCP is one of many cases in point.
    – eggyal
    Oct 24, 2012 at 6:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .