Since i downloaded Tahoe 26.1, every time I start up my computer I have to log in. I don't want to have to do this. How can I turn it off? My "Automatically log in" function is off and grayed out, and my "FileVault" stuck "on".
iMac 24″, macOS 26.1
This is a known bug in macOS Tahoe
Checking The Status of FileVault—To check the status of file vault within Terminal.app type the following:
fdesetup status
if you want to disable FileVault :
sudo fdesetup disable
(note: your psswd will not echo on screen type it in anyway, use the enter\return key to proceed.)
and try again your settings for Log-in... reboot if necessary
hiroshimalife wrote:
Actually I asked GROK and it helped me in seconds which may have taken me an hour. Thanks for your help. First time using the Terminal.app. FileVault is off. I restarted and no sign-in. How will turning off FileVault affect the security. Thanks again.
I have never used the FileVault user settings. Tahoe flipped the switch...
No difference your mac is still encrypted, FileVault is just one more layer, however
I will say —auto log in bypasses the need for your Admin password to your user data. Personally I would not. Your use case may be different. TouchID is very convenient feature if you have it.
ref: Security and your Apple Account Security and your Apple Account - Apple Support
ref: Apple Platform Security - Apple Apple Platform Security - Apple Support
ref: How does FileVault work on a Mac?
Actually I asked GROK and it helped me in seconds which may have taken me an hour. Thanks for your help. First time using the Terminal.app. FileVault is off. I restarted and no sign-in. How will turning off FileVault affect the security. Thanks again.
Owl-53 wrote:
Below is from another AI / LMM Chatbot response ( Not GROK )
When FileVault is disabled:
1. Your disk is no longer encrypted at rest
You know as well as I the reliability of AI. Point #1 is certainly wrong, on any Mac capable of running Tahoe (meaning it has a T2 chip or Apple Silicon) the data on the internal SSD(s) are encrypted with the keys stored in the Secure Enclave. So connecting the drive externally won’t work, nor will removing the SSD(s) and accessing them via another device. That was not true prior to the T2 chip, before which FileVault was the only (native) way to get full disk encryption.
However, logging into the device allows the data to be decrypted on the fly. Since the OP is choosing to not require a password at login, anyone with physical access to the device can easily access the data on it. With a password required for login but FileVault off, anyone with physical access to the device can reset the login password and gain access to the data on the Mac.
2. Your data is vulnerable if the device is lost or stolen
Documents, emails, photos, keychains, stored passwords, and cached messages are accessible without needing decryption.
I believe that keychains and passwords (stored in the Passwords app) are not vulnerable, those are stored in the Secure Enclave and require the user’s login password or biometrics to access. But everything else is an open book, which could include things like the user’s financial account information, etc. Depending on how the Mac’s is configured, gaining access to the computer could allow someone (a burglar, for example) to have access to email and text messages sent to the user, providing access to 2FA-protected bank accounts, etc.
While laptops are generally more vulnerable because they are often carried around with the user, desktop computers are commonly stolen during break-ins. IMO, the data on any computer (and backups of that computer) should be encrypted. On a Mac, turning on FileVault is the easiest way to accomplish that. It’s even easier now that the recovery key can be stored securely in iCloud.
hiroshimalife wrote:
How will turning off FileVault affect the security.
With FileVault off, the data on your Mac are encrypted BUT if someone gets access to your Mac then they can reset the login password and will be able to access the data on your Mac (except your keychain passwords and any encrypted disk images you may have set up). IMO, that renders the drive encryption functionally irrelevant, which is why I use FileVault.
But if you are choosing to not use a password to log in, then I guess you’re not at all concerned about data security anyway.
hiroshimalife wrote:
thank you, but I don't know how to use the Terminal.app. Can you explain that for please? Thanks for your time
Applications/Utilities/Terminal.app
Launch the App— copy and paste the command given above.
Quit the Terminal.app
I am not sure but it is possible if you have an issue —to add Terminal.app to
>System Settings> Privacy& Security>Full Disk Access
hiroshimalife wrote:
This is a home computer. Are you speaking of someone getting access to my computer through the net?
So what if your home is broken into and your computer stolen? The thief now owns you, has all your data both personal and financial. That’s why it is not a good idea to have automatic login enabled and FileVault turned on. Be prepared for such a scenario.
hiroshimalife wrote:
I live in Japan, in the country. Not gonna happen.
Actions , this specific situation have consequences, which in turn have repercussions.
These repercussions may not always appear immediately, but when they do, they are often the least expected.
neuroanatomist wrote:
Owl-53 wrote:
Below is from another AI / LMM Chatbot response ( Not GROK )
When FileVault is disabled:
1. Your disk is no longer encrypted at rest
You know as well as I the reliability of AI. Point #1 is certainly wrong, on any Mac capable of running Tahoe (meaning it has a T2 chip or Apple Silicon) the data on the internal SSD(s) are encrypted with the keys stored in the Secure Enclave. So connecting the drive externally won’t work, nor will removing the SSD(s) and accessing them via another device. That was not true prior to the T2 chip, before which FileVault was the only (native) way to get full disk encryption.
However, logging into the device allows the data to be decrypted on the fly. Since the OP is choosing to not require a password at login, anyone with physical access to the device can easily access the data on it. With a password required for login but FileVault off, anyone with physical access to the device can reset the login password and gain access to the data on the Mac.
2. Your data is vulnerable if the device is lost or stolen
Documents, emails, photos, keychains, stored passwords, and cached messages are accessible without needing decryption.
I believe that keychains and passwords (stored in the Passwords app) are not vulnerable, those are stored in the Secure Enclave and require the user’s login password or biometrics to access. But everything else is an open book, which could include things like the user’s financial account information, etc. Depending on how the Mac’s is configured, gaining access to the computer could allow someone (a burglar, for example) to have access to email and text messages sent to the user, providing access to 2FA-protected bank accounts, etc.
While laptops are generally more vulnerable because they are often carried around with the user, desktop computers are commonly stolen during break-ins. IMO, the data on any computer (and backups of that computer) should be encrypted. On a Mac, turning on FileVault is the easiest way to accomplish that. It’s even easier now that the recovery key can be stored securely in iCloud.
That which you rightly 👍 " caught "
This is an excellent illustration of how well or not well some AL /LMM models information is reliable or not
Especially since the arrival of a certain individual
Good work there, none the less
Keep it up my friend and colleague
thank you, but I don't know how to use the Terminal.app. Can you explain that for please? Thanks for your time
This is a home computer. Are you speaking of someone getting access to my computer through the net?
I live in Japan, in the country. Not gonna happen.
hiroshimalife wrote:
This is a home computer. Are you speaking of someone getting access to my computer through the net?
Below is from another AI / LMM Chatbot response ( Not GROK )
FileVault provides full-disk encryption. This means:
When FileVault is disabled:
1. Your disk is no longer encrypted at rest
Anyone with physical access to your Mac can:
2. Your data is vulnerable if the device is lost or stolen
Documents, emails, photos, keychains, stored passwords, and cached messages are accessible without needing decryption.
Since i downloaded Tahoe 26.1, every time I start up my computer I have to log in.
