FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
Reviewed by Marcus Holmberg
FileVault
support.apple.com/en-gb/guide/mac-help/mh11785/mac 4 ratings so far*
Rate FileVault: No account needed
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
FileVault is the most seamless encryption option for Mac users: it is built in, costs nothing, and on Apple silicon hardware the underlying encryption is hardware-enforced at the storage controller level. Recovery can be tied to an iCloud account or a local recovery key, and the choice matters: iCloud recovery means Apple can technically assist law enforcement. Like BitLocker, it is closed-source, so the implementation cannot be independently verified. For most Mac owners it is the right default, but users with strong threat models should consider the iCloud recovery trade-off carefully and choose a local key instead.
Website at a glance
support.apple.com
B score 75
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 3d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
FileVault alternatives
PrivacyNotes Encrypted notes, tasks, calendar, files, passwords and a journal with mood and medication tracking, all unlocked by one 12-word recovery phrase. Sign up with no email and no password. Open source.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
BitLocker BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
VERNAM A free, fully client-side file encryptor that runs in your browser. Drop in any file, set or generate a passphrase, and it seals the result into its own .vrn format. Nothing is ever uploaded, and it works offline.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
Cryptomator Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to a cloud service.
* Average ratings will show on this page once the threshold of 5 ratings is reached.