FileVault

E41428

disk encryption software full-disk encryption system macOS security feature

FileVault is Apple’s built-in full-disk encryption system for macOS that protects data by encrypting the contents of a Mac’s startup disk.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
FileVault canonical	4
FileVault 2	2
FileVault (macOS)	1
FileVault full-disk encryption	1

How this entity was disambiguated

This entity first appeared as the object of triple T321701 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: FileVault
Context triple: [macOS, supportsSecurityFeature, FileVault]

A. HFS Plus
HFS Plus is a proprietary journaling file system developed by Apple for use in macOS and earlier Macintosh operating systems, succeeding the original HFS to support larger files and volumes.
B. macOS
macOS is Apple’s proprietary Unix-based operating system known for its graphical user interface, tight integration with Apple hardware and services, and strong emphasis on usability and security.
C. iCloud
iCloud is Apple’s cloud storage and synchronization service that securely backs up and keeps users’ photos, files, and data up to date across their Apple devices.
D. Lockit
Lockit is the corrupt jailer and one of the main antagonists in John Gay's satirical ballad opera "The Beggar's Opera."
E. Mac mini
The Mac mini is a compact desktop computer designed by Apple that offers full macOS functionality in a small, versatile form factor suitable for both consumer and professional use.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: FileVault
Target entity description: FileVault is Apple’s built-in full-disk encryption system for macOS that protects data by encrypting the contents of a Mac’s startup disk.

A. HFS Plus
HFS Plus is a proprietary journaling file system developed by Apple for use in macOS and earlier Macintosh operating systems, succeeding the original HFS to support larger files and volumes.
B. macOS
macOS is Apple’s proprietary Unix-based operating system known for its graphical user interface, tight integration with Apple hardware and services, and strong emphasis on usability and security.
C. iCloud
iCloud is Apple’s cloud storage and synchronization service that securely backs up and keeps users’ photos, files, and data up to date across their Apple devices.
D. Lockit
Lockit is the corrupt jailer and one of the main antagonists in John Gay's satirical ballad opera "The Beggar's Opera."
E. Mac mini
The Mac mini is a compact desktop computer designed by Apple that offers full macOS functionality in a small, versatile form factor suitable for both consumer and professional use.
F. None of above. chosen

Statements (48)

Predicate	Object
instanceOf	disk encryption software ⓘ full-disk encryption system ⓘ macOS security feature ⓘ
canBeManagedBy	MDM solutions ⓘ
category	Secure Enclave ⓘ surface form: Apple security technology data protection technology ⓘ
compatibleWith	Apple silicon ⓘ surface form: Apple silicon Macs Intel-based Macs with T2 chip ⓘ
configurationLocation	System Settings > Privacy & Security (modern macOS) ⓘ
dataStateProtected	data at rest ⓘ
defaultStateOnNewMacs	enabled by default on many modern Macs ⓘ
developer	Apple Inc. ⓘ
documentationURL	https://support.apple.com/HT204837 ⓘ
effectOfDisabling	triggers disk decryption process ⓘ
encryptionScope	entire startup disk ⓘ full disk ⓘ
encryptionType	on-the-fly encryption ⓘ
encrypts	macOS system volume ⓘ startup disk ⓘ
integratedWith	Recovery Key mechanism ⓘ iCloud account recovery (optional) ⓘ macOS login system ⓘ
introducedIn	Mac OS X 10.3 Panther ⓘ Mac OS X 10.7 Lion ⓘ
majorRevision	FileVault self-linksurface differs ⓘ surface form: FileVault 2
operatingSystem	macOS ⓘ
platform	Mac ⓘ
previousConfigurationLocation	System Preferences > Security & Privacy (older macOS) ⓘ
protectsAgainst	offline attacks on disk contents ⓘ unauthorized access to data on lost or stolen Macs ⓘ
purpose	full-disk encryption ⓘ protect user data at rest ⓘ
recoveryMethod	recovery key displayed during setup ⓘ storing recovery key with Apple (optional, via iCloud account) ⓘ
relatedTo	Secure Enclave ⓘ T2 security chip ⓘ macOS Recovery ⓘ
requires	administrator privileges to enable ⓘ initial disk encryption process ⓘ user authentication at startup ⓘ
statusCheck	can be verified in macOS system settings ⓘ
storesKeysIn	Secure Enclave ⓘ surface form: Secure Enclave (on supported Macs)
supports	institutional recovery key ⓘ multiple user accounts ⓘ personal recovery key ⓘ
usedIn	enterprise Mac deployments ⓘ
usesEncryptionAlgorithm	XTS-AES-128 ⓘ
usesKeyLength	256-bit key ⓘ

How these facts were elicited

Referenced by (8)

Full triples — surface form annotated when it differs from this entity's canonical label.

macOS → supportsSecurityFeature → FileVault ⓘ

FileVault → majorRevision → FileVault self-linksurface differs ⓘ

this entity surface form: FileVault 2

Mac → hasSecurityFeature → FileVault ⓘ

Mac OS X 10.3 Panther → includedFeature → FileVault ⓘ

Apple operating systems → securityFeature → FileVault ⓘ

this entity surface form: FileVault (macOS)

Mac OS X 10.7 Lion → includedFeature → FileVault ⓘ

this entity surface form: FileVault 2

macOS Big Sur → securityFeature → FileVault ⓘ

this entity surface form: FileVault full-disk encryption

macOS Sequoia → supportsSecurityFeature → FileVault ⓘ

All labels observed (4)

How this entity was disambiguated Show

Statements (48)

How these facts were elicited Show

Referenced by (8)

How this entity was disambiguated

How these facts were elicited