Reset or Change Encrypted APFS Drive's Password

Lucien
Written byLucienUpdated on May 09, 2026
Gerhard Chou
Approved byGerhard Chou

Table of Contents

PAGE CONTENT:

In today's digital age, securing sensitive information is paramount. With the growing reliance on digital storage, encryption has become a cornerstone of data protection. For Mac users, Apple's File System (APFS) is a critical tool for securing data on hard drives, solid-state drives (SSDs), and other storage devices.

change password of encrypted APFS drive

APFS is designed with strong encryption capabilities to keep data safe from unauthorized access. If you are using an encrypted APFS drive, chances are you've set up a password for added security. However, there may come a time when you need to reset or change the password for encrypted APFS drive. Whether you've forgotten your password or simply want to update your security settings, this guide will help you understand the process.

Everything About APFS Encryption and Passwords

Before delving into the steps for resetting or changing the password, it is important to understand how APFS encryption works and the role of the password.

What is APFS Encryption?

APFS is the default file system used on macOS, beginning with macOS High Sierra. It is optimized for flash and solid-state drives (SSDs), but it also works with traditional hard drives (HDDs). One of the key features of APFS is its ability to encrypt data, which means that all files stored on an APFS drive are protected with encryption. APFS supports full-disk encryption, which secures all files and data on the drive. The encryption is done using strong algorithms, making it difficult for unauthorized users to access the contents of the drive.

When you enable encryption on an APFS drive, a password is required to access the data. This password is tied to an encryption key, which unlocks the drive. Without the password, the encrypted data remains inaccessible.

Role of the Password

The password you choose for your encrypted APFS drive acts as a key to unlock the encrypted data. If you forget the password or need to change it for security reasons, you must have a way to either reset or change it. Failure to do so can result in permanent data loss, which is why it is essential to keep your password secure and backed up.

How to Reset the Password on an Encrypted APFS Drive?

There are several methods available for resetting the password on an encrypted APFS drive, depending on the situation. Here are some common approaches.

Method 1. Use macOS Recovery Mode

The first method to reset the password on an APFS drive is through macOS Recovery Mode. This method is ideal when you’ve forgotten the password and need to regain access to your drive.

  1. Restart your Mac into macOS Recovery mode:
    • For Intel-based Mac: Press and hold down Command + R while it boots up. This will start macOS in Recovery Mode.
    • For Apple silicon Mac: Press and hold power button until it boots into macOS Recovery mode, select Options and click on Continue button.
  2. Once in Recovery Mode, select Disk Utility from the macOS Utilities window.
  3. In Disk Utility, locate the encrypted APFS drive from the sidebar.
  4. Select the drive and click on Unlock. You will be prompted to enter the password.

    Select the drive and click on Unlock

  5. If you can't remember the password, click on Reset Password. If you've linked your Apple ID to the drive or have a recovery key, follow the prompts to reset the password.

Method 2. Use Apple ID for Password Reset

If you have associated your Apple ID with the encrypted drive, you can use it to reset the password. This method is convenient if you've forgotten your password but have access to your Apple ID.

  1. Open System Preferences or System Settings and navigate to Apple ID.
  2. Under iCloud, select Keychain to access your Apple Keychain.
  3. If you have the password saved in Keychain, you can simply retrieve it.
  4. Alternatively, during the login process or when unlocking the drive, macOS may offer the option to use your Apple ID to reset the password.

Method 3. Use the Recovery Key

If you generated a recovery key when encrypting the drive, this key can be used to reset the password.

  1. During the password prompt, you'll see an option to enter the recovery key.
  2. Type in the recovery key exactly as it was provided.
  3. Follow the on-screen instructions to reset the password.

Method 4. Use Terminal (Advanced Option)

For more experienced users, Terminal can be used to reset the password. This method should be used with caution, as incorrect commands can result in unintended consequences.

  1. Open Terminal from Applications > Utilities.
  2. Type the following command:

    sudo fdesetup resetpasswd

  3. You'll be prompted to enter the administrator password.
  4. Follow the prompts to reset the password.

How to Change the Password on an Encrypted APFS Drive?

Once you've regained access to your drive, you may want to change the password for enhanced security. There are several ways to change the password on an encrypted APFS drive.

Changing the Password via System Preferences

  1. Open System Preferences and go to Security & Privacy.
  2. Click on the FileVault tab, where you'll find your encrypted drives listed.
  3. Select the encrypted APFS drive and click on Change Password.
  4. Enter the new password and confirm it.

Using Disk Utility

Disk Utility also provides an option to change the password of an encrypted APFS drive.

  1. Open Disk Utility from Applications > Utilities.
  2. Select the encrypted APFS drive from the sidebar.
  3. Click Unlock and enter the current password.
  4. After unlocking, select Change Password and input the new password.

Using Keychain Access (for related passwords)

If the password you are changing is associated with your Apple ID or other related services, you may want to update it in Keychain Access.

  1. Open Keychain Access from Applications > Utilities.
  2. Search for the relevant password entry, such as your Apple ID or FileVault password.
  3. Right-click and choose Delete or Edit to update the password.

Preventative Measures for Future Access

To avoid future issues with APFS encryption and passwords, take the following steps to ensure that you can easily recover your data if needed.

Using iCloud and Apple ID for Easy Recovery

Link your APFS drive to your Apple ID and iCloud account for easier recovery. This ensures that if you forget the password in the future, you can use your Apple ID to reset it quickly.

Generating and Storing a New Recovery Key

Store your recovery key in a safe place, such as a password manager, a secure physical location, or cloud storage. Having a backup recovery key can make a world of difference in case of password loss.

Regular Backups

Make a habit of backing up your files regularly. Use Time Machine or other backup solutions to ensure that even if something goes wrong with your drive, you won't lose your valuable data.

Recover Lost Data from Encrypted or Erased APFS Drive on Mac

Mac data recovery software - such as Donemax Data Recovery for Mac can help you recover data from an encrypted or erased APFS drive on Mac:

Step 1. Download and install Donemax Data Recovery for Mac on your Mac and connect the APFS drive to your Mac.

Step 2. Open Donemax Data Recovery for Mac, select the APFS drive to search for lost files.

select the APFS drive to search for lost files

Step 3. Click on Scan button, Donemax Data Recovery for Mac will find all recoverable files including existing files, deleted/erased files, etc.

Scan deleted Mac files

Step 4. Once the scan is completed, you can preview all recoverable files. Then select the wanted files, click on Recover button to save them.

Recover deleted Mac files

FAQs about Reset/Change Password of Encrypted APFS

No. APFS encryption is designed to be highly secure. Without the password or the recovery key, the data on the drive is cryptographically locked. No software, including professional data recovery tools, can bypass this without the keys.
No. Changing the password only updates the encryption "wrapper." Your files remain untouched and encrypted; you simply use the new credentials to "unfold" the encryption when mounting the drive.
This usually happens if the drive is not currently mounted or if it’s a system-managed volume (like a Time Machine backup) that requires specific permissions. Ensure the drive is unlocked first before trying to change the password.
They use the same underlying technology. FileVault encrypts your entire startup disk, whereas APFS (Encrypted) is typically used for individual volumes or external drives. For external data security, APFS (Encrypted) is the modern gold standard.
If you are locked out and can't erase the drive, you may need to "Unmount" it first or use the 'View' menu in Disk Utility to select 'Show All Devices'. Select the physical drive (the top level) rather than the encrypted volume to perform a forced wipe.

Conclusion

Managing the password for an encrypted APFS drive is essential for maintaining the security of your data. Whether you need to reset or change the password due to forgetting it or for added security, there are several methods available to regain access. By following the outlined steps, you can ensure that your data remains protected while minimizing the risk of data loss. Always remember to back up your data, store recovery keys securely, and regularly update your passwords to maintain the highest level of security.

logo stage

Donemax Data Recovery for Mac

Donemax Data Recovery for Mac is one of the best Mac data recovery software. It is easy-to-use and can help in recovering deleted, formatted, inaccessible or lost data from Mac HDD/SSD, external disk, USB drive, SD card, camera or other storage devices.

Lucien
Contributing Writer

Lucien

Lucien is a writer and a chief programmer of Donemax software who has worked in the company for 5+ years. He has written much of the content on the site and devotes to providing troubleshooting and solution for Windows and Mac users including disk cloning, data recovery, migration, eraser, error fixes.

Gerhard Chou
Editor in chief

Gerhard Chou

In order to effectively solve the problems for our customers, every article and troubleshooting solution published on our website has been strictly tested and practiced. Our editors love researching and using computers and testing software, and are willing to help computer users with their problems