I have a M1 Mac. In order to install a legacy kernel extension needed for a peripheral, I have changed my startup disk security settings to "Reduced Security" as detailed here:


My question is: does the startup disk security setting of "Reduced Security", or the installation of legacy kernel extensions, have any effect on the always on disk encryption of the startup disk?

Specifically, if I choose to wipe the disk by selecting "erase all content and settings", will the encryption keys still be securely erased?

1 Answer 1


No, it's entirely separate from the disk encryption: it's just about whether the computer will boot from external drives or "other" OSes; and allowing kernel extensions.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .