← Basic Checks

Basic · Check result

Use full-disk encryption on your startup disk

FileVault full-disk encryption prevent unauthorized access to the data on your startup disk. It encrypts all your data on your startup  drive. When your Mac is off, your data is not readable by an attacker.

How to fix it

macOS 13 - 14

  1. Open “System Preferences”
  2. Go to “Privacy & Security” > “FileVault”
  3. Click on “Turn On”
  4. Confirm with administrator username and password.
  5. We recommend not to store your recovery key in iCloud, instead write it down (outside your Mac, plain paper does a good job here.)
FileVault settings in macOS: Use full-disk encryption on your startup disk

macOS 10.11 – 12

  1. Go to “System Preferences” > “Security & Privacy”
  2. Click the FileVault tab.
  3. Click lock, then enter an administrator name and password.
  4. We recommend not to store your recovery key in iCloud, instead write it down (outside your Mac, plain paper does a good job here.)
  5. Click Turn On FileVault.
  6. A reboot is required
FileVault settings in macOS: Use full-disk encryption on your startup disk

More about activating FileVault from Apple Support https://support.apple.com/en-us/HT204837