The T2 chip was designed for FileVault, and it comes at no cost to that and in Apple silicon Macs. Here’s how it works, and why everyone should enable it.
encryption
Does software encryption (APFS Encrypted) result in significant overhead when using faster SSDs with a faster Apple silicon Mac? What about computing SHA256 digests?
Encryption for iMessage has been switching to an improved method to resist quantum attacks. Tahoe and its sisters take the next step, and add quantum-secure encryption for Internet connections.
If you’re still using an Intel Mac, do you know when its macOS support will end? Is it worth upgrading any more when most of the new features are for Apple silicon Macs?
How your password isn’t used to encrypt the Data volume on your Mac’s internal SSD, but is used to encrypt the key used for that encryption, and the benefits.
You’ve set up your new Mac, and now need to prepare the old one for disposal, maybe to a friend, relative or someone buying it, or to go for recycling. What to do next,
If you’ve got large files like Virtual Machines or media libraries on the Data volume on your Mac’s internal SSD, use this method to keep the size of its snapshots smaller.
There’s extensive experience in recovering deleted files from hard disks, and results can be surprisingly good. Recovery from SSDs is more tricky, and secure ‘wiping’ ensures nothing can ever be recovered, making good backups essential.
How FileVault and APFS Encrypted are enabled and managed differently, and details of how they work internally. Concentrates on T2 and Apple silicon Macs, but also covers older Intel models.
First securing the Home folder in an encrypted sparse disk image, then to whole-volume encryption using CoreStorage, now using T2 and Apple silicon chips.
The Eclectic Light Company 