6

I'm trying to decrypt my disk and turn off FileVault, but I can't do that. Firstly, the Turn Off FileVault... button is disabled.

Locked Security & Privacy FileVault Window in System Preferences - Locked

Unlocked Security & Privacy FileVault Window in System Preferences - Unlocked

Secondly, I try sudo fdesetup disable with Terminal but it also doesn't work. It returns FileVault was not disabled (-69595). Trying to Turn Off Filevault with Terminal

I'm running Mac OS Mojave (Version 10.14.1) on a MacBook Air 11" (Released in Mid 2013). Thanks!

  • 2
    Do you have an SSD and a T2 chip? – bmike Jan 20 at 4:52
  • 2
    On the newest Macs that ship with the T2 chip that is the controller for the SSD, the drive is always encrypted. There is no turning that off so to revert to the state where you have automatic decryption and no user account authorized to decrypt, you would need to wipe the OS in an erase install scenario and the restore files and apps from your backup. - apple.stackexchange.com/questions/349028/… – bmike Jan 20 at 4:55
  • 2
    My Mac is an 11-inch Macbook Air released in Mid 2013 and it has a Hard Drive. – The Web Developer Blog Jan 20 at 4:57
  • 2
    Ok. Let’s get that edit d into the main question. I’ll delete this since it’s not applicable. Thanks @Mth for the extra details – bmike Jan 20 at 5:36
  • Please explain why you want to decrypt your drive. The 2013 MacBook Air ships ONLY with an SSD. It does NOT have a T2, which only ships in 2017 and later devices. Please explain what you're trying to accomplish, and why. Do you have an encrypted EXTERNAL drive or are you trying to decrypt your internal SSD? – Wilfred Smith Apr 17 at 20:11
1

sudo diskutil cs decryptVolume -passphrase "YOUR_RECOVERY_KEY"

If you don't have a recovery key created separately from your users passphrases, you can follow the instructions here:

https://support.apple.com/en-us/HT202385

Usage:  diskutil coreStorage decryptVolume
        lvUUID|MountPoint|DiskIdentifier|DeviceNode
        [-stdinpassphrase | -passphrase passphrase]
Start a background decryption process that will convert the on-disk bytes which
back the given logical volume from encrypted back to plain. You must supply a
"Disk" passphrase (not a FileVault User passphrase) interactively or with one
of the above parameters. After this command completes, the conversion will be
ongoing; you can check progress with `diskutil coreStorage list`.
Example: diskutil coreStorage decryptVolume
                  11111111-2222-3333-4444-555555555555
  • Trying that results in -passphrase does not appear to be a valid Core Storage Logical Volume UUID or disk – The Web Developer Blog 2 mins ago
-1

Here is something you could try:

  1. Boot into recovery mode by pressing cmd+R at starup.
  2. Open Disk Utility and unlock your partition. You can either use an enabled account password or the recovery key.
  3. Select the drive and press "First Aid"
  4. Select the partition and press "First Aid"
  5. Close Disk Utility and select "Terminal" from "Utilities" in the menubar
  6. Try sudo fdesetup disable again

If this fails, chances are pretty hight that something is broken in your partition and you will need to reformat the drive completely and restore your data.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .