FileVault 2 Recovery — Frequently Asked Questions
Can you unlock without a PRK/IRK?
Sometimes. If the volume uses a user password (and you have good hints), we can assess password-based recovery. A valid Personal or Institutional Recovery Key provides the quickest path.
Where might my recovery key be stored?
Common places: your Apple ID/iCloud (older setups), your organization’s MDM/Jamf escrow, or a printed/saved Personal Recovery Key record.
Do you need my Mac login password?
No. We only assess FileVault encryption. macOS account credentials aren’t required.
Can you fix APFS header corruption?
We can evaluate whether backup APFS metadata exists and advise next steps. Severe corruption may prevent recovery without a valid key.
Is recovery guaranteed?
No. It depends on the protectors (password, PRK/IRK), hint quality, and metadata integrity. We start with a free offline assessment and then provide realistic options.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
How to Prepare & Send (Secure)
- Identify the target: internal system disk, data volume, or external FileVault disk.
- Image the drive: if healthy, create a sector-by-sector image. If large/difficult, submit the inquiry and we’ll instruct how to capture a small header-only diagnostic safely.
- Compress the image into
.7z/.zipand set a temporary password. - Submit an inquiry at /inquiry/. We’ll reply with a one-time, secure upload link. Please do not email files.
- Add detailed hints (below). Better hints = faster, more accurate feasibility estimates.
Offline only: All diagnostics and testing occur on isolated systems. First step is a free, independent assessment — no commitment required.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
What to Send
- A small diagnostic image of the encrypted container headers (we’ll instruct after your inquiry), or a full disk image if you already have one.
- Any Recovery Keys you have: PRK (personal recovery key) or IRK (institutional key/certificate).
- Password hints for the FileVault unlock password (see guide below).
- (Optional) macOS version, model (Intel or Apple Silicon), and whether it’s an internal or external drive.
Please do not email files. Submit our inquiry page; we’ll reply with a one-time, secure upload link for your encrypted archive.
Where Recovery Keys Are Commonly Saved
- iCloud / Apple ID (older setups): PRK may be stored with your Apple ID account.
- MDM/Jamf (company/school): IRKs are often escrowed by IT.
- Printed/saved text: look for a “FileVault Personal Recovery Key” printout or text file.
- Key escrow portals: if managed, ask IT for the device’s escrowed PRK/IRK.
If you locate a valid PRK/IRK, unlocking is immediate — mention it in your inquiry and we’ll guide safe use.
How to Prepare & Send (Secure)
- Identify the target: internal system disk, data volume, or external FileVault disk.
- Image the drive: if healthy, create a sector-by-sector image. If large/difficult, submit the inquiry and we’ll instruct how to capture a small header-only diagnostic safely.
- Compress the image into
.7z/.zipand set a temporary password. - Submit an inquiry at /inquiry/. We’ll reply with a one-time, secure upload link. Please do not email files.
- Add detailed hints (below). Better hints = faster, more accurate feasibility estimates.
Offline only: All diagnostics and testing occur on isolated systems. First step is a free, independent assessment — no commitment required.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
What We Can Help With
- Password-based unlock assessments (users with SecureToken) using your detailed hints.
- Recovery key workflows: validating and guiding use of a Personal Recovery Key (PRK) or Institutional Recovery Key (IRK).
- APFS/HFS+ header diagnostics: check encryption metadata integrity to judge feasibility.
- External/FileVault-encrypted disks (portable drives) protected with a password.
Important Limitations
- We do not bypass the Secure Enclave (T2/Apple Silicon) or macOS account protections.
- Recovery generally requires either a feasible password-hint model or a valid PRK/IRK.
- Activation Lock/iCloud lock is separate and cannot be bypassed by disk recovery.
- We never ask for your Apple ID password; we only assess the FileVault encryption.
What to Send
- A small diagnostic image of the encrypted container headers (we’ll instruct after your inquiry), or a full disk image if you already have one.
- Any Recovery Keys you have: PRK (personal recovery key) or IRK (institutional key/certificate).
- Password hints for the FileVault unlock password (see guide below).
- (Optional) macOS version, model (Intel or Apple Silicon), and whether it’s an internal or external drive.
Please do not email files. Submit our inquiry page; we’ll reply with a one-time, secure upload link for your encrypted archive.
Where Recovery Keys Are Commonly Saved
- iCloud / Apple ID (older setups): PRK may be stored with your Apple ID account.
- MDM/Jamf (company/school): IRKs are often escrowed by IT.
- Printed/saved text: look for a “FileVault Personal Recovery Key” printout or text file.
- Key escrow portals: if managed, ask IT for the device’s escrowed PRK/IRK.
If you locate a valid PRK/IRK, unlocking is immediate — mention it in your inquiry and we’ll guide safe use.
How to Prepare & Send (Secure)
- Identify the target: internal system disk, data volume, or external FileVault disk.
- Image the drive: if healthy, create a sector-by-sector image. If large/difficult, submit the inquiry and we’ll instruct how to capture a small header-only diagnostic safely.
- Compress the image into
.7z/.zipand set a temporary password. - Submit an inquiry at /inquiry/. We’ll reply with a one-time, secure upload link. Please do not email files.
- Add detailed hints (below). Better hints = faster, more accurate feasibility estimates.
Offline only: All diagnostics and testing occur on isolated systems. First step is a free, independent assessment — no commitment required.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
What We Can Help With
- Password-based unlock assessments (users with SecureToken) using your detailed hints.
- Recovery key workflows: validating and guiding use of a Personal Recovery Key (PRK) or Institutional Recovery Key (IRK).
- APFS/HFS+ header diagnostics: check encryption metadata integrity to judge feasibility.
- External/FileVault-encrypted disks (portable drives) protected with a password.
Important Limitations
- We do not bypass the Secure Enclave (T2/Apple Silicon) or macOS account protections.
- Recovery generally requires either a feasible password-hint model or a valid PRK/IRK.
- Activation Lock/iCloud lock is separate and cannot be bypassed by disk recovery.
- We never ask for your Apple ID password; we only assess the FileVault encryption.
What to Send
- A small diagnostic image of the encrypted container headers (we’ll instruct after your inquiry), or a full disk image if you already have one.
- Any Recovery Keys you have: PRK (personal recovery key) or IRK (institutional key/certificate).
- Password hints for the FileVault unlock password (see guide below).
- (Optional) macOS version, model (Intel or Apple Silicon), and whether it’s an internal or external drive.
Please do not email files. Submit our inquiry page; we’ll reply with a one-time, secure upload link for your encrypted archive.
Where Recovery Keys Are Commonly Saved
- iCloud / Apple ID (older setups): PRK may be stored with your Apple ID account.
- MDM/Jamf (company/school): IRKs are often escrowed by IT.
- Printed/saved text: look for a “FileVault Personal Recovery Key” printout or text file.
- Key escrow portals: if managed, ask IT for the device’s escrowed PRK/IRK.
If you locate a valid PRK/IRK, unlocking is immediate — mention it in your inquiry and we’ll guide safe use.
How to Prepare & Send (Secure)
- Identify the target: internal system disk, data volume, or external FileVault disk.
- Image the drive: if healthy, create a sector-by-sector image. If large/difficult, submit the inquiry and we’ll instruct how to capture a small header-only diagnostic safely.
- Compress the image into
.7z/.zipand set a temporary password. - Submit an inquiry at /inquiry/. We’ll reply with a one-time, secure upload link. Please do not email files.
- Add detailed hints (below). Better hints = faster, more accurate feasibility estimates.
Offline only: All diagnostics and testing occur on isolated systems. First step is a free, independent assessment — no commitment required.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.
FileVault 2 Recovery – macOS Full-Disk Encryption
Locked out of a FileVault 2–encrypted Mac disk? We provide secure, offline feasibility assessments for APFS/HFS+ volumes protected by FileVault 2 (including external drives). Follow the steps below to prepare your case and request a free, no-obligation assessment.
What We Can Help With
- Password-based unlock assessments (users with SecureToken) using your detailed hints.
- Recovery key workflows: validating and guiding use of a Personal Recovery Key (PRK) or Institutional Recovery Key (IRK).
- APFS/HFS+ header diagnostics: check encryption metadata integrity to judge feasibility.
- External/FileVault-encrypted disks (portable drives) protected with a password.
Important Limitations
- We do not bypass the Secure Enclave (T2/Apple Silicon) or macOS account protections.
- Recovery generally requires either a feasible password-hint model or a valid PRK/IRK.
- Activation Lock/iCloud lock is separate and cannot be bypassed by disk recovery.
- We never ask for your Apple ID password; we only assess the FileVault encryption.
What to Send
- A small diagnostic image of the encrypted container headers (we’ll instruct after your inquiry), or a full disk image if you already have one.
- Any Recovery Keys you have: PRK (personal recovery key) or IRK (institutional key/certificate).
- Password hints for the FileVault unlock password (see guide below).
- (Optional) macOS version, model (Intel or Apple Silicon), and whether it’s an internal or external drive.
Please do not email files. Submit our inquiry page; we’ll reply with a one-time, secure upload link for your encrypted archive.
Where Recovery Keys Are Commonly Saved
- iCloud / Apple ID (older setups): PRK may be stored with your Apple ID account.
- MDM/Jamf (company/school): IRKs are often escrowed by IT.
- Printed/saved text: look for a “FileVault Personal Recovery Key” printout or text file.
- Key escrow portals: if managed, ask IT for the device’s escrowed PRK/IRK.
If you locate a valid PRK/IRK, unlocking is immediate — mention it in your inquiry and we’ll guide safe use.
How to Prepare & Send (Secure)
- Identify the target: internal system disk, data volume, or external FileVault disk.
- Image the drive: if healthy, create a sector-by-sector image. If large/difficult, submit the inquiry and we’ll instruct how to capture a small header-only diagnostic safely.
- Compress the image into
.7z/.zipand set a temporary password. - Submit an inquiry at /inquiry/. We’ll reply with a one-time, secure upload link. Please do not email files.
- Add detailed hints (below). Better hints = faster, more accurate feasibility estimates.
Offline only: All diagnostics and testing occur on isolated systems. First step is a free, independent assessment — no commitment required.
Password Hints Guide (FileVault)
- Length — exact or range (e.g., 8–10, 12 exactly).
- Character sets — lowercase/UPPERCASE, digits, symbols (which?).
- Patterns — Word+year, initials+2 digits, ends with
!/88/123, etc. - Words reused — names, brands, pets, places, phrases.
- Dates/numbers — birthdays, anniversaries; formats used (
YYYY,DDMM,MMYYYY). - Common endings —
!!,00,11,2020, etc. - Keyboard habits — QWERTY/QWERTZ, favorite symbols, doubled letters.
Even small clues drastically reduce the keyspace and improve the odds of recovery.
Special Cases
- Apple Silicon & T2 Macs: FileVault integrates with the Secure Enclave. Without a feasible password model or PRK/IRK, recovery is not possible.
- External APFS FileVault volumes: usually password-protected — good hints can be effective.
- Corruption: if APFS container headers are damaged, we’ll assess whether backup metadata is intact.
Lawful Use Only: By submitting a drive/image, you confirm you are the rightful owner or have legal permission to decrypt it.
Privacy: We analyze only the encrypted structures necessary for recovery. Your data is never uploaded to third parties.
No Guarantee: Success depends on encryption protectors used (password, PRK/IRK), metadata integrity, and hint quality.
Ready for a Free Assessment?
Send your FileVault diagnostic image and available keys/hints securely. We’ll review them offline and respond with recovery options — no commitment, no risk.