You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Viewing FileVault Recovery Key

Original question: How to find file vault recovery key? - Apple Community


Hello, the response to the above didn't truly address the member's question. The user notes that "When the Mac arrived, FileVault already was turned on", yet the answer simply indicates turning on File Vault. (Unhelpful)


Could you clarify please?


MacBook Air 13″, macOS 12.5

Posted on Oct 15, 2022 11:51 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 15, 2022 12:23 PM

torrentula wrote:

Original question: How to find file vault recovery key? - Apple Community

Hello, the response to the above didn't truly address the member's question. The user notes that "When the Mac arrived, FileVault already was turned on", yet the answer simply indicates turning on File Vault. (Unhelpful)

Could you clarify please?

The link provided has the information: Use FileVault to encrypt the startup disk on your Mac - Apple Support

"Choose how you want to be able to unlock your disk and reset your password, in case you ever forget your password

  • If you're using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password.*
  • If you're using OS X Mavericks, you can choose to store a FileVault recovery key with Apple by providing the questions and answers to three security questions. Choose answers that you're sure to remember.*
  • If you don't want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk.


If you lose both your account password and your FileVault recovery key, you won't be able to log in to your Mac or access the data on your startup disk."


The FileVault Recovery key is not visible on the Mac -- that would circumvent the purpose of encrypting the disk.


When the Mac arrived, FileVault already was turned on

If you obtained the Mac new from Apple, contact Apple or return the Mac where you purchased it to have them correct this.


If you obtained the Mac from someone other than Apple, you need to obtain the FileVault Recovery key from them.


Failing this, if you have no way to obtain the FileVault Recovery key, you can turn off FileVault:


Turn off FileVault

If you no longer want to encrypt your startup disk, you can turn off FileVault:

  1. Choose Apple menu > System Preferences, then click Security & Privacy.
  2. Click the FileVault tab.
  3. Click , then enter an administrator name and password.
  4. Click Turn Off FileVault.

Decryption occurs in the background as you use your Mac, and only while your Mac is awake and plugged in to AC power. You can check progress in the FileVault section of Security & Privacy preferences. 


After turning off FileVault, after it completes decryption, you can re-enable FileVault and specify your own new key.

4 replies
Question marked as Top-ranking reply

Oct 15, 2022 12:23 PM in response to torrentula

torrentula wrote:

Original question: How to find file vault recovery key? - Apple Community

Hello, the response to the above didn't truly address the member's question. The user notes that "When the Mac arrived, FileVault already was turned on", yet the answer simply indicates turning on File Vault. (Unhelpful)

Could you clarify please?

The link provided has the information: Use FileVault to encrypt the startup disk on your Mac - Apple Support

"Choose how you want to be able to unlock your disk and reset your password, in case you ever forget your password

  • If you're using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password.*
  • If you're using OS X Mavericks, you can choose to store a FileVault recovery key with Apple by providing the questions and answers to three security questions. Choose answers that you're sure to remember.*
  • If you don't want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk.


If you lose both your account password and your FileVault recovery key, you won't be able to log in to your Mac or access the data on your startup disk."


The FileVault Recovery key is not visible on the Mac -- that would circumvent the purpose of encrypting the disk.


When the Mac arrived, FileVault already was turned on

If you obtained the Mac new from Apple, contact Apple or return the Mac where you purchased it to have them correct this.


If you obtained the Mac from someone other than Apple, you need to obtain the FileVault Recovery key from them.


Failing this, if you have no way to obtain the FileVault Recovery key, you can turn off FileVault:


Turn off FileVault

If you no longer want to encrypt your startup disk, you can turn off FileVault:

  1. Choose Apple menu > System Preferences, then click Security & Privacy.
  2. Click the FileVault tab.
  3. Click , then enter an administrator name and password.
  4. Click Turn Off FileVault.

Decryption occurs in the background as you use your Mac, and only while your Mac is awake and plugged in to AC power. You can check progress in the FileVault section of Security & Privacy preferences. 


After turning off FileVault, after it completes decryption, you can re-enable FileVault and specify your own new key.

Oct 15, 2022 12:58 PM in response to torrentula

Ah, looks like the new Mac was either pre-configured of migrated with a new recovery key.


Using the "fdsetup validate recovery" command, I found my old key was unrecognized:


➜ sudo fdesetup validaterecovery
Enter the current recovery key:
false


See this article for details:

Is your macOS FileVault Recovery Key current? Here’s how to check | Macworld


torrentula wrote:

Just curious:

I recently purchased my Mac and performed a migration from my old Mac. The old Mac had a recovery key set, which I do know. (As suggested, new Mac had File Vault enabled by default)

Perhaps the Migration Assistant used original recovery key for my new Mac?


Viewing FileVault Recovery Key

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.