Encrypting backups is a controversial subject. For some people, it's the only way to make sure their data is secure, so that no one else can get to it. For others, it defeats the very purpose of backup, allowing any error or defect to render the data unrecoverable.

Nov 17, 2017 I have a brand new Mac running 10.13. It is a company issued Mac and whole disk encryption is mandated. I want to use bootcamp to dual boot for those times I need a native boot of Windows. I run Vbox and a Windows 10 VM when I just need Windows but occasionally need to run native. Oct 30, 2018  Step 5. Click on the icon on your Mac's desktop to open the drive, now you can access the BitLocker encrypted drive like a Mac's native drive, such as read, write, copy, delete files, etc. As mentioned above, with the help of Hasleo BitLocker Anywhere For Mac, you can easily access the BitLocker encrypted drive in macOS & Mac OS X.

If saving your photos is more important to you than securing your financial data, then skip encryption. If you have more valuable information on your desk than on your backups, skip encryption. If you worry that someone else will get access to your backups and your data, then, by all means, encrypt away. Here's how.

How to encrypt a Time Machine backup

Time Machine is Apple's built-in, set-it-and-mostly-forget-it backup system for the Mac. Turn it on, and it'll make a backup of your Mac and then keep it incrementally up to date over the hours, days, and weeks that follow. While it's not encrypted by default, you can enable encryption when you set it up.

How to encrypt a clone backup

If you're using a clone backup like SuperDuper or Carbon Copy instead of Time Machine, you can also encrypt the drive. It's a two-step process to set up but, once you've got it up and running, it's just as easy to maintain as any other cloning system.

1. Boot from your cloned backup drive.
2. Re-install macOS to create a recovery volume on that drive.
3. Turn on FileVault in System Preferences.

Unless you have a recovery volume, you won't be able to boot reliably from the clone or turn on FileVault. Once that's done, you can boot back to your primary drive once FileVault gets started; you don't have to wait for it. And once the clone backup is encrypted, you'll be able to resume your regular, iterative backup process.

How to locally encrypt online backups

Online backup services like Backblaze and Carbonite are a different beast: You're not backing up to a drive under your physical control, where you can encrypt it yourself before transferring any data. You're backing up to someone else's servers in the cloud, typically using the encryption built into their client apps.

Some online backup services do let you set an encryption password, though, as a way of adding extra privacy and protection. However, it carries the same recovery cost as local encryption.

BackBlaze:

You have the option with Backblaze to add an additional layer of privacy via a user-selected passphrase. This passphrase will be used to encrypt your private key. This passphrase is your responsibility to remember and safeguard. This is important: if you forget or lose this passphrase there is no way that anyone, including Backblaze, can decrypt, and thus restore, your data. When you choose to add your own passphrase there is no 'forgot passphrase' mechanism as Backblaze does not know your passphrase.

Carbonite:

During the initial installation, Carbonite Safe allows you to manage your own encryption key for Windows computers. If you choose to manage your own encryption key, Carbonite will prompt you to save a .PEM file which Carbonite will reference to encrypt your files before backing them up to our servers. Managing your own encryption will make it so you are the only person capable of installing the Carbonite subscription. We recommend that you do not manage encryption keys unless you have a special need to do so given the risk of data loss.

If you use a different online backup service, check with them about encryption passwords or encryption keys, and you should find the options you need.

Do you even encrypt?

If you encrypt your backups, let me know your strategy — what products do you use, and how do you have your system set up?

Updated March 2020: Updated local backups information.

Backing up: The ultimate guide

Main

We may earn a commission for purchases using our links. Learn more.

A story about me, two Apple Watches, and five lost years

So I bought another Apple Watch. Here’s the story!

Mac Boot Camp Full Disk Encryption

Install Windows on your Mac

Boot Camp is a utility that comes with your Mac and lets you switch between macOS and Windows. Download your copy of Windows 10, then let Boot Camp Assistant walk you through the installation steps.

Update AMD graphics drivers for Windows in Boot Camp

Download and install the latest AMD graphics drivers for Windows on Mac models that use AMD graphics.

Use your Apple keyboard in Windows

You can use an Apple keyboard or a keyboard designed for Microsoft Windows with your Mac. Many of the keys that you'd see on a PC have equivalent keys on an Apple keyboard.

Resources

Have a question? Ask everyone.

The members of our Apple Support Community can help answer your question. Or, if someone’s already asked, you can search for the best answer.

Mac Encryption Boot Camp Windows 10

Tell us how we can help

Answer a few questions and we'll help you find a solution.

Mac Encryption Boot Camp Windows 7