Skip to content

Tagged: #filevault

← Back to all articles
APFS encryption: FileVault, per-file keys, and the SEP's role
How macOS encrypts every byte on disk — per-file keys derived in the SEP, the volume encryption key wrapped by user password, hardware AES in the SSD controller.
apfsencryptionfilevaultsep