vault

OS X's encryption service, FileVault, originally stored users' home folder contents in encrypted disk images. In OS X Lion, FileVault now uses Apple's new CoreStorage volume manager to encrypt the entire disk. With CoreStorage, the OS configures a small hidden partition with a preboot welcome screen that looks like the standard OS X log-in window and contains user accounts that are authorized to unlock the volume and cause the system to load and automatically log in to the account specified on the preboot screen.

Unfortunately, while more secure and while offering a relatively seamless experience when sitting at … Read more

FileVault, in OS X Lion and later, is part of a volume management technology called CoreStorage, which includes a full-disk encryption option that functions underneath the operating system, allowing it to be transparent to the operating system's functions and encrypt all data on the drive. This is a convenient way to secure OS X, but in order to work, it does need to have an unencrypted section of the drive that it uses to store the encryption keys for unlocking the drive.

Any drive encrypted with FileVault will have a small hidden partition that contains these keys, and for … Read more

A new feature that Apple has included in Mountain Lion offers a convenient way to encrypt secondary volumes on your Mac, making data security far more convenient.

Recently discovered by Mac OS X Hints contributor "kirkmc," if you right-click a nonboot volume in the Finder, the contextual menu that appears now contains an option to encrypt the disk. Selecting this will bring up a window requesting that you supply a password and a password hint for the drive, and upon doing this, the system will wait a short while (the length of which depends on the amount of … Read more

NQ Mobile Vault is the simplest application I've seen for keeping text messages, call history, contacts, photos, and videos private on your mobile device. Celebrities, pay attention.

Basically, Vault creates an encrypted, password-protected space on your device, in which you can store photos, videos, text messages, and call history. It's easy to move items into and out of the space, and you can even permanently delete them, if you'd like.

Once you create your password, there are a few ways to start using Vault. First, within the app, you can pull up all of your messages and … Read more

If you like the idea of storing sensitive data safely, securely, and away from prying eyes, you need to create an encrypted virtual disk on your hard drive. That's easier than it sounds, thanks to Klonsoft's LockDisk. This tool creates encrypted, password-protected, hidden volumes in your system. You can specify the size of your volume to make sure you have enough space for your stuff without wasting disk space. LockDisk works in 32-bit Windows editions. Some users may need to right-click the program's Start menu entry or executable file and select Run as Administrator to use LockDisk. … Read more

Last week a security hole in OS X 10.7.3 was uncovered where the account passwords for Lion users who had upgraded from Snow Leopard and who were still using the legacy FileVault encryption scheme were being stored in plain text in system log files. This issue happened apparently because a debugging flag for the OS software had been left enabled in the public release. Following this finding, Apple today issued the next version of OS X Lion, which along with other fixes and tweaks, closes this security hole for these users.

The security hole was found to be … Read more

A security hole has recently been found in the latest version of OS X 10.7.3, through which a user's password may be written to a log file in plain text if that person is using the older legacy FileVault data encryption technology from past versions of OS X.

While the hole may be a problem for a certain group of people who still use the legacy encryption scheme, there are several things that can be done about it.

The hole happened when an Apple software engineer apparently left a debugging flag enabled in the production release of … Read more

MacFixIt Answers is a feature in which we answer questions e-mailed in by our readers.

This week people wrote in with questions managing a persistent warning in Web browsers about local storage when browsing YouTube, what to do about an encrypted hard drive for which you do not have the recovery key or password, managing a bluetooth mouse that keeps losing its connection, and a reader suggestion for a file quarantining bug in OS X Lion. We welcome alternative approaches and views from readers, so if you have any suggestions or alternative approaches to these problems, then post them in … Read more

When a problem arises in OS X because of a software configuration error, often one troubleshooting step to take for clearing the issue or at least investigating it further is to boot into Safe Mode; however, sometimes Safe Mode may not work.

Booting to Safe Mode in OS X is done by holding the Shift key at startup, which triggers a minimal boot environment where only basic Apple-supplied extensions and services are loaded. This will help you determine if problems are happening from peripheral devices or third-party extensions such as those supplied by some security software packages. In addition to … Read more