How FileVault and APFS Encrypted are enabled and managed differently, and details of how they work internally. Concentrates on T2 and Apple silicon Macs, but also covers older Intel models.
FileVault
Recommendations for the ‘standard’ user for security and privacy protection from startup to shutdown. A broad overview of all key systems and how they fit together.
First securing the Home folder in an encrypted sparse disk image, then to whole-volume encryption using CoreStorage, now using T2 and Apple silicon chips.
How secure and private can you make a macOS VM on Apple silicon? Follow these steps to create your own private Mac within macOS.
Could old images be retained on a device or your Mac after you had securely erased it using Erase Assistant?
Although some are still experiencing the issue of new FileVault security keys, Sonoma 14.5 looks the best release yet, and fixes some troublesome bugs.
This reference covers fsck_apfs, diskutil information, diskutil apfs, conversion of HFS+ to APFS, mount_apfs, and newfs_apfs.
Recent oddities with FileVault Recovery Keys, and a new exploit GoFetch, raise concerns over how secure FileVault protection is.
You’ve just updated to 14.4 or 14.4.1 and are prompted to set up a new Recovery Key for FileVault. What do you do next, and how should you check the key?
What do you do when your Mac refuses to log you in because it thinks your password is incorrect? Don’t rush or panic, but follow these steps.
The Eclectic Light Company 