I forgot my encrypted disk password on OS X

4

1

My disk is formatted with Mac OS Extended (Journaled, Encrypted). I have a super long and random password. It won't let me paste my password in and I keep manually typing it wrong. There is nothing on this disk and I just need to changed the password to something that I can manually change. What do I do? Here is my dialog that I keep getting:

disk unlock password message

Anyone with any suggestions?

UPDATE: I do not care if I lose the data or not.

Jason Silberman

Posted 2013-01-22T01:05:17.890

Reputation: 163

1Please clarify, do you know the password and this is about entering it correctly, or do you not know it an this is about explaining how forgetting encryption passwords is bad? – Daniel Beck – 2013-01-22T06:22:38.440

I do not know the password. I do not care if I lose the data. – Jason Silberman – 2013-01-23T02:22:34.413

Interesting. Usually you'd do this via Disk Utility, but it doesn't allow to partition locked (i.e. encrypted and not mounted) disks. Does this work?

– Daniel Beck – 2013-01-23T06:42:16.787

Answers

2

Good encryption allows for no recovery. That's how it protects your system from other people.

Encryption sounds like a good idea till you learn to live with it and take extra precautions to prevent the data loss it will force upon you in the event you lose the password. Upon covering all the bases it becomes a useful tool to prevent recovery of data from stolen equipment and not a liability from forgetting the password.

Various other operating systems allow for making a recovery disk or thumb drive when you first encrypt the disk that you can then store in a safe place in case this event happens.

The only recourse is to get it right at least once if you have it written down correctly.

Fiasco Labs

Posted 2013-01-22T01:05:17.890

Reputation: 6 368

Not a solution for this question, but you're probably right. If the password is stored in the keychain, OSX allows for an admin password that can open the keychain as well. You can loose both of course. I recommend using a simple and easy to remember password for disk encryption, that others cannot guess easily. Why do you use this? To protect from the NSA or to protect from a friend or thief? In the latter two cases, a simple password will be sufficient. – SPRBRN – 2013-09-10T14:15:22.777

At the time I answered this little addendum wasn't there UPDATE: I do not care if I lose the data or not. The only solution is to wipe the disk which requires dropping down to OS level utilities to bypass the encryption checks or by mounting it under another OS. See @mpoisot's answer for that. – Fiasco Labs – 2013-09-22T18:15:35.190

5

I'm facing the exact same issue. The HD in my MacMini has become corrupted and my only option is to erase it, but, in a fit of security consciousness, I encrypted it with FileVault and so Disk Utility won't erase it at all.

So, not caring about the data on that MacMini (it's just my TV server, nothing that cant be reinstalled and all the actual data is on an external drive) I've booted it in target disk mode (hold down t when you start it up and connect it via FireWire to another Mac) then fire up your Terminal.

% diskutil cs list to get the the Logical Volume Group ID

You want the Logical Volume Group ID

then run

% diskutil cs delete XXXXXXXXXXXXXXXXXXXXXXXXXXXX <-- put the Logical Volume Group ID in place of the Xs

In my case it said

The Core Storage Logical Volume Group UUID is 48AE3F70-916B-4BEB-AF63-0C2423E1481E
Started CoreStorage operation
Ejecting Logical Volumes
Destroying Logical Volume Group
Error: -69783: Unable to delete the CoreStorage Logical Volume Group

You can safely ignore the error however. When I then fired up Disk Utility there was my disk - newly erased. I will now reboot my iMac in Recovery Disk mode and re-install Mavericks on the MacMini. (Fingers crossed)

Dave Sag

Posted 2013-01-22T01:05:17.890

Reputation: 151

Hi, just to clarify, Disk Utility/disktutil won't let you erase a disk encrypted with FileVault? – Louis – 2014-09-20T06:00:34.247

That's correct. – Dave Sag – 2014-09-20T21:45:12.493

1Did you underline the right volume ID in the screenshot? – qerub – 2015-01-06T12:13:47.040

Ditto to what @qerub said: You said “Logical Volume Group ID” twice (even putting it into bold), and your code (output) block says “Logical Volume Group UUID is 48AE3F70-916B-4BEB-AF63-0C2423E1481E”, and your screenshot shows “48AE3F70-916B-4BEB-AF63-0C2423E1481E” as the “Logical Volume Group” ID — but you have marked the Physical Volume ID in the screenshot. … … … … … … … P.S. It would be nice if you could post the diskutil cs list output as text in addition to (or instead of) the screenshot — see this.

– G-Man Says 'Reinstate Monica' – 2020-02-09T01:49:54.867

0

Without the current password, you will have to erase and reformat the disk in Apple's Disk Utility. It is always a good idea to store these passwords in a safe place. Apple also allows you to store the key with them. See this article for more information.

Keltari

Posted 2013-01-22T01:05:17.890

Reputation: 57 019

I have tried that, but it will not let me re-format the disk or erase the data. All the tabs in Disk Utility are greyed out – Jason Silberman – 2013-01-23T02:25:06.597

0

I started getting this dialog last week. Not sure why the dialog showed up since the disk is still mounted properly.

(I didn't remember the password for this disk so bumped into this question.)

In my case the password is still stored in my Keychain and it's possible to show the password there. Check the "Show password" box (shown in the screenshot below) and enter your administrator password. This allowed me to add it to my password manager.

enter image description here

kqw

Posted 2013-01-22T01:05:17.890

Reputation: 1 781

-1

I had the same problem, and This SuperUser answer worked. Basically you get into the terminal and use diskutil directly to bypass DiskUtility's overprotection.

mpoisot

Posted 2013-01-22T01:05:17.890

Reputation: 129

You should provide the relevant information from the answer or just mark this question a duplicate of that one. – Ramhound – 2016-04-23T12:19:21.263

-1

The only option is to securely erase the effected partition using a similar method to how you encrypted it originally.

You may find this article from OSXDaily helpful.

John James Jacoby

Posted 2013-01-22T01:05:17.890

Reputation: 1

2Can you please summarize the main points from the article here? – slhck – 2014-06-27T17:16:49.747