I just upgraded to Tahoe. I used to be able to just turn on my computer and it would boot up. Now I have to put in my password before it boots up. I'm guessing this is some kind of security thing but I'd really like to have it like it was before. Just turn on the computer and it boots. I can't find any setting that would allow this. Any ideas? Thanks.
iMac (M1, 2021)
Go to System Settings > Users and Groups, and you should be able to set it to automatically log in from there. If FileVault is enabled, you will have to turn that off first. For that... System Settings > Privacy and Security, then scroll down to FileVault and turn it off.
Go to System Settings > Users and Groups, and you should be able to set it to automatically log in from there. If FileVault is enabled, you will have to turn that off first. For that... System Settings > Privacy and Security, then scroll down to FileVault and turn it off.
FYI, on Apple Silicon, your disk is ALWAYS encrypted.
What File Vault does in this situation is to additionally use your local user password to protect the keys of the disk encryption scheme.
Restated, with File Vault off, anyone running the machine will have access to the data …
… and as Tim pointed out, w/o any password (or an auto-entered password) … this means ANYONE.
See more detail here:
Volume encryption with FileVault in macOS - Apple Support
Chattanoogan wrote:
FYI, on Apple Silicon, your disk is ALWAYS encrypted.
The internal SSD is always encrypted – but normally, "the keys to the deadbolt lock are left in the lock." So the real-time encryption and decryption is not providing any security.
Where the real-time encryption comes in useful is when
There would be no point in encrypting the hard drive if you've set the machine to auto-logon at boot...
Your data is completely exposed. Why bother encrypting it?
Thank you. That gave me what I wanted. Unfortunately, I wasn't able to use file vault anymore. When I turned file vault on again after setting automatic login to on, automatic login turned itself off. That's too bad because I wanted to use file vault. But it did fix the problem at login. Thanks.
”leaving the key in the deadbolt” is an apt analogy.
The presumption is that any “authenticated” user IS authorized for disk access. (this is indeed a specific setting the admin must make when setting up a user account)
Erasing the key(s) indeed reduces the leftover “hash” to so many un-intelligible random characters.
It’s also - I suspect - how remote erase of an iPhone works.
Good point.
Don't want to log in every time I turn on the computer
