Can a stolen external HD Time Machine drive be accessed on another Mac or PC?

If someone steals my external HD Time machine drive - can they plug it in to another Mac or PC and retrieve my data?



[Re-Titled by Moderator]

Original Title: Time machine

iMac 21.5″ 4K, macOS 13.7

Posted on Jul 20, 2025 3:13 PM

Reply
22 replies

Jul 20, 2025 6:33 PM in response to Petra01

Booberoi wrote:

So I have to erase current back up and start again to set up encryption? What about all past backups I may want to use - all deleted when I encrypt?


Very possibly. The sources I'm looking at are a bit confusing.


On the one hand, there are the Sequoia and Sonoma versions of this:

Keep your Time Machine backup disk for Mac secure - Apple Support (PH)

Both say:

"When you switch a Time Capsule or network backup disk from unencrypted to encrypted, your existing backups are erased and new encrypted backup sets are created. When you switch locally connected disks (such as an external disk) to encrypted backups, your data is preserved and encrypted."

But the Sonoma version adds that you must "set up the disk again as an encrypted backup disk." (Wouldn't that involve erasing it?!?)


Then there is Other World Computing – Rocket Yard Blog – How to Encrypt Your Time Machine Backups on a Mac. The screenshot in it is of a Time Machine dialog that includes an [X] Encrypt backups option. (Is this something separate from the Finder's "Encrypt" option?!?). One of the comments:

"You make it sound like you can change this feature on an existing Time Machine Backup, but you can’t. You can only enable this feature the first time you set up a backup drive. And if I’m not mistaken, it will also erase the drive to enable encryption. So it will delete existing backups and files."

Jul 21, 2025 9:15 AM in response to Petra01

Since you are concerned about security, have you enabled Filevault on your Mac? Without Filevault being enabled, anyone with physical access to the Mac may be able to access the data on the internal SSD. Filevault can be enabled/disabled on the boot drive at any time.


Again, if you forget the login/Filevault password you may get locked out although Apple does provide a method to reset the password if you do forget it. However, if for some reason that process to reset the login & Filevault password fails, then you will need to start completely over by resetting the Mac & restoring from a backup.

Jul 21, 2025 1:51 PM in response to Petra01

While a 2018+ Mac with the T2 security chip or M-series CPU always has the data on the internal SSD hardware encrypted, the data can technically still be accessed.


If Filevault is not enabled, then with some Macs someone could boot into Recovery Mode, or from a USB boot drive to be able to access the data stored on the internal SSD. Someone could also put the Mac into Target Disk Mode so that your computer would appear as an external drive on their computer & access the files that way.


Here again is an Apple article regarding Filevault which mentions these things generally in passing:

Volume encryption with FileVault in macOS - Apple Support


Edit: With older Macs it is very easy to access the data on the internal boot drive if Filevault is not enabled. With the later Macs & versions of macOS it becomes a bit more difficult, but not impossible.


Of course, the data is only as secure as the password(s) used for Filevault and the macOS user accounts. An easily guessed password does not provide much security for someone serious about accessing the data or accounts.

Jul 21, 2025 2:50 PM in response to HWTech

Thank you to all - I find all of these discussions bewildering!

Firstly - re

Encrypting - I just hide my backup drive and put it in safe when I go away for more than 2 days

FireVault - don't want to make a mistake and have my computer data unavailable - so I'll just use Apple log in when computer turn on/off

Basic stuff - at least I cant stuff anything up

Thanks all!


Jul 22, 2025 12:13 AM in response to Petra01

Time Machine makes rather extensive use of the features of the file system on the backup drive - whether that file system is HFS+ or APFS. Copying the whole structure in a way that preserves relationships that Tome Machine depends upon is rather more complicated than copying the individual files.


I can’t even back up one of my NON-Tome Machine disks that is formatted using APFS without the backup being MUCH larger than the original. (The original has a number of files that share space on the disk due to APFS “lazy evaluation” of file copy operations.)

Jul 22, 2025 12:47 AM in response to Petra01

It has become obvious to me that playing around with encryption of external time Time Machine and Firevault can cause all sorts of issues and may not be compatible

I am leaving everything as it is and was made - at least I can retrieve backup files anytime and my 2017 Mac runs efficiently without the slowing of FireVault- any comments?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Can a stolen external HD Time Machine drive be accessed on another Mac or PC?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.