Skip to content Skip to site navigation Skip to service navigation

How to Encrypt Disk Partitions on macOS

In order for devices to be fully compliant—as defined in the Information Security Office (ISO) standards—all internal partitions must be encrypted. The initial SWDE (Stanford Whole Disk Encryption) enrollment procedure only encrypts the “system” partition in multi-partition Macs. All internal, non-system partitions are encrypted manually from within Finder.

  1. Launch Finder and select the non-system partition. Right-click (or CTRL + click) the partition name and select Encrypt <partition name>.
    choose to encrypt a partition from Finder
  2. Create an encryption password. This can be any password you choose but don’t forget it. It will be required the next time you login to the Mac. Then, click Encrypt Disk.
    create an encryption password
  3. When encryption is complete the menu item will change to Decrypt <partition name>.
  4. The next time you reboot your Mac or log in you will be prompted to enter your encryption password to unlock the encrypted volume. This happens every reboot or login unless the password is saved in the keychain.
    enter your encryption password to unlock your partition  
Last modified September 19, 2017