Let’s say I want to prevent anyone from accessing my Mac if they try to boot it from an external drive or in recovery mode. Is there a way to lock it down at that level?
Firmware Password on macOSSolved
Tags
Replies (7)
Hey @douglas,
Yes, you can use a firmware password to do just that! It’s a security feature in macOS that blocks anyone from starting your Mac from any drive other than the main startup disk without entering the password. So, even if someone tries booting from an external drive or into recovery mode, they’ll be prompted to enter the firmware password first.
So, if I set it up, can I still start my Mac normally, or will I need the password every time?
You’re good to start up as usual from your main drive without entering the firmware password. It only kicks in if someone tries to boot from another source, like an external drive or into recovery mode.
How do I set up a firmware password? Is it straightforward?
Yes, it is rather simple! Just restart your Mac and hold down Command (⌘) + R right after it starts up to boot into recovery mode. From there, go to Utilities > Startup Security Utility or Firmware Password Utility, depending on your macOS version. You can then turn on the firmware password, set it, and restart your Mac. Now, the firmware password will be active and required for any non-standard boot attempts.
Why would someone use a firmware password if macOS already has user passwords?
While your user password protects your account, a firmware password adds an extra layer of security by preventing access at the hardware level. This is particularly useful for safeguarding your data if your Mac is lost or stolen, as it blocks unauthorized access through alternative boot methods.