In hardware encryption, keys are kept in the Secure Enclave. Software encryption in APFS has no such luxury, just keybags at container and volume level. This explains when they’re created.
key
How your password isn’t used to encrypt the Data volume on your Mac’s internal SSD, but is used to encrypt the key used for that encryption, and the benefits.
Keybags, wrapping keys, VEKs and KEKs all explained. Did you realise how Recovery Keys are implemented? Or how the SSV protects against read errors?
Recent oddities with FileVault Recovery Keys, and a new exploit GoFetch, raise concerns over how secure FileVault protection is.
What happens when you press and hold the e key? Does it repeat, or do you see a window offering accented versions? Do you know you can change that?
On Intel Macs, key combinations determine startup modes and more, but they have no effect on Apple silicon Macs. And how to deal with keyboard problems when logging in.
It’s only a little detail, but wasn’t Apple so good at getting the details right?
Could your HTTPS and VPN be so easy to crack that a well-prepared hacker could open your secure connections?
I discovered that my new keyboard does not have a Delete key. Is there an alternative?
I seem to have inadvertently hit a combination of keys that has disabled the upper case letter V on my keyboard. How can I reset that?
