Turn On FileVault Encryption with fdesetup enable
Encrypt your Mac's startup disk from the terminal using Apple's built-in fdesetup tool.
Run sudo fdesetup enable and confirm with your account password to start encrypting the startup disk with FileVault.
01Command
Command
$ sudo fdesetup enable02What it does
fdesetup enable switches on FileVault, Apple's full-disk encryption for the startup volume, using your account credentials as the unlock key. Encryption runs in the background and typically finishes within an hour on Apple silicon Macs; check progress with fdesetup status. Apple's macOS User Guide describes FileVault as the way to keep data safe if the Mac is lost or stolen — on modern Macs with a T2 chip or Apple silicon the hardware assist makes it nearly free performance-wise.
03Risk
!Warning: Save the recovery key it offers — losing both your account password and the recovery key makes the encrypted data permanently unrecoverable.
04Undo
Undo
$ sudo fdesetup disable05Sources
- FDESETUP(8) - macOS manual pageEvidence: The manual page documents 'fdesetup enable' with the description 'Enables FileVault', including auth options and recovery key output.
- Encrypt Mac data with FileVault - macOS User GuideEvidence: Apple's FileVault guide explains what encrypting Mac data with FileVault does and that it protects data if the Mac is lost or stolen.
Last verified: 2026-09-19 · Category: Security & Privacy