Enterprise Mac Security: Mac OS X Snow Leopard

9.3. Encrypting User Data Using FileVault

FileVault is a technology in OS X that allows users to seamlessly safeguard their personal data vis-à-vis encryption. FileVault is configured on an account-by-account basis, and once enabled on an account, all contents of the respective user's home directory are encrypted behind the scenes. In the event that a computer is physically compromised, any accounts on the system that have FileVault enabled will maintain a rather high probability of avoiding compromise of confidentiality, subject to the strength of the password used to encrypt the data, and whether the machine was logged in and running at the time of theft. In the case of FileVault, this password is equivalent to the user's login password. Without ...