HACKINTOSH.ORG | Macintosh discussion forums

How to encrypt a bootable clone in macOS

<article>
   <section class="page">
<p>
Tony Padgett uses FileVault in macOS to encrypt his startup volume. However, it occurred to him that because he routinely updates a bootable clone of that drive, his clone remains unprotected at rest.</p>

<p>
After cloning my internal drive to an external, I can take that external clone, plug it into another Mac, and see and read the contents.</p><p>
This “hole” is not very obvious to the average person. I somehow assumed because FileVaut has encrypted my iMac, an encrypted version of it was being cloned the external drive.</p>

<p>
I agree! I understood this because of extensive testing of FileVault, but it’s certainly not immediately obvious if you don’t know how a seemingly identical clone is managed at a low level by macOS.</p><p class="jumpTag"><a href="/article/3156626/security/how-to-encrypt-a-bootable-clone-in-macos.html#jump">To read this article in full or to leave a comment, please click here[/url]</p></section></article>

Source: How to encrypt a bootable clone in macOS (http://www.macworld.com/article/3156626/security/how-to-encrypt-a-bootable-clone-in-macos.html#tk.rss_all)