5 ms·
> As long as you had FileVault enabled (& good password management), that's basically all you needed. Does that protect your computer if it's asleep? My guess
by hackuser 10y ago
> As long as you had FileVault enabled (& good password management), that's basically all you needed.
Does that protect your computer if it's asleep? My guess is most Macbooks are either asleep or on 99% of the time.
- cimnine 10y ago> You may wish to enforce hibernation and evict FileVault keys from memory instead of traditional sleep to memory: $ sudo pmset -a destroyfvkeyonstandby 1 $ sudo pmset -a hibernatemode 25 > If you choose to evict FileVault keys in standby mode, you should also modify your standby and power nap settings. Otherwise, your machine may wake while in standby mode and then power off due to the absence of the FileVault key. See issue #124 for more information. These settings can be changed with: $ sudo pmset -a powernap 0 $ sudo pmset -a standby 0 $ sudo pmset -a standbydelay 0 $ sudo pmset -a autopoweroff 0 See [1] for more macOS hardening tricks. [1] https://github.com/drduh/macOS-Security-and-Privacy-Guide#full-disk-encryption https://github.com/drduh/macOS-Security-and-Privacy-Guide#fu...
- donza 10y agoApple's own Best Practices doc for FileVault 2 is also useful read for those interested: http://www.training.apple.com/pdf/WP_FileVault2.pdf http://www.training.apple.com/pdf/WP_FileVault2.pdf