-3

I just got a MacBook and am planning on using it with Filevault and a Firmware password. How secure would using a new Yubikey be while using it to login using the standard method if the computer gets stolen?

Would the Filevault key encrypted key be encrypted with the Yubikey or something?

genealogyxie
  • 431
  • 3
  • 13
  • 2
    I'm finding this an odd question. The document you linked doesn't even mention FileVault. I think you are assuming that the YubiKey can be used with FileVault. I'm not sure it can. FileVault needs a static password, not a rotating one. – schroeder Jul 09 '16 at 17:45
  • That's what I was wondering. I guess it would require the decryption key to be stored on a chip like a TPM – genealogyxie Jul 09 '16 at 17:47
  • 1
    So, what is your question? – Neil Smithline Jul 09 '16 at 23:44
  • I was asking if Filevault would be secure when using a Yubikey to login, which was answered by schroeder (it's not secure) – genealogyxie Jul 10 '16 at 04:19
  • I don't think schroeder answered with "it's not secure" but just "you can't use them together" – Rory Alsop Jul 10 '16 at 18:21

1 Answers1

-1

Seems like Filevault can't be secured with a Yubikey when using a dynamic password since it doesn't have a TPM that can securely store cryptographic keys (which was expected)

genealogyxie
  • 431
  • 3
  • 13