← Professional Checks

Professional · Check result

FileVault should not have an institutional recovery key

FileVault has an institutional recovery key: Your full-disk encryption can be recovered with a recovery key. An institutional recovery key is normally created by a central company computer management system. If your Mac is not part of such a system and you don’t have created the recovery key on your own, then change it. If this Mac is a company, school .. Mac, then don’t change it. There might be compliance reasons why this is configured.

Create a personal recovery key and remove the institutional recovery key.

How to fix it

macOS 10.11 – 14

  1. open terminal.app

  2. Enter and press return: 

    Terminal command
    sudo fdesetup removerecovery -institutional

  3. Enter the administrator password

  4. Create a personal Recovery key