Fix FileVault that will not decrypt
We'll find and enter the recovery key, try the password, or get the key from IT—or tell you when to call support.
What you'll need
- Recovery key (from iCloud or backup)
- Another device to look up the key (if needed)
Step-by-step diagnostic
Quick triage — pick your path
Get started
Choose the option that matches what you see. You can jump straight to that section.
Show full guide
Steps
Goal: Find and enter the FileVault recovery key, or get it from IT.
- Check if FileVault is asking for a recovery key or password.
- Good: FileVault prompts for the key or password—get the key and enter it. Proceed to Get recovery key.
- Bad: Different problem—see boot or hardware guides.
Get recovery key
Goal: Find the FileVault recovery key.
- On another device, go to icloud.com. Sign in with your Apple ID. Check Find My for the Mac.
- Check your backup or the file you saved when you enabled FileVault.
- For work or school Macs, contact IT.
- Good: You have the key. Proceed to Enter key.
- Bad: No key—contact IT for work Macs, or Apple support for personal accounts.
Enter key
Goal: Enter the recovery key and decrypt the drive.
- On the FileVault screen, type the recovery key. Press Enter or the button.
- If you set a password, try it first. If it fails, use the recovery key.
- If the keyboard does not respond, you may need to enter the firmware password first (hold Option at boot).
- Good: macOS decrypts and boots. FileVault will re-bind.
- Bad: The key does not work—confirm you have the key for this Mac. If yes and it still fails, call support.
When to get help
Contact Apple or IT if:
- You do not have the recovery key.
- The key does not work after several tries.
- The Mac is work-managed and IT cannot provide the key.
Verification
- macOS boots after entering the recovery key.
- FileVault is enabled and the drive is protected.
- No repeated prompts for the key.
Escalation ladder
Work from the device outward. Stop when the problem is fixed.
- Get recovery key iCloud, backup, or IT for work Macs.
- Enter key Type recovery key on FileVault screen.
- Firmware password Enter firmware password if keyboard does not respond.
- Call support No key or key does not work.
What to capture if you need help
Before calling support or posting for help, have these ready. It speeds everything up.
- Mac model and account type (personal or work)
- Whether you have the recovery key
- Whether firmware password is set
Does FileVault ask for a recovery key or password?
Screen with a field for the key or password.
Check the screen. FileVault may ask for your password or the recovery key. Yes: try the password first, then the key. No: different problem—see boot or hardware guides.
You can change your answer later.
Do you have the recovery key?
Key is in iCloud, backup, or with IT for work Macs.
Get the key from iCloud, your backup, or IT. Yes: enter it on the FileVault screen. No: contact IT or Apple—without the key, the drive may not decrypt.
You can change your answer later.
Enter the key
Type the recovery key. Press Enter or the button. macOS should decrypt and boot. If the key fails, confirm you have the key for this Mac.
Call support
Contact Apple or IT. Without the recovery key, the drive may not decrypt.
Reviewed by Blackbox Atlas
Frequently asked questions
- Why would FileVault not decrypt?
- Wrong password, firmware password blocking input, or the recovery key was never saved. A firmware update or hardware change can also trigger recovery. Without the key or correct password, the drive stays locked.
- Can I fix FileVault that will not decrypt myself?
- Yes, if you have the recovery key. Get it from iCloud or your backup. Enter it when prompted. For work Macs, contact IT.
- When should I call support for FileVault?
- If you do not have the recovery key, the key does not work, or the Mac is work-managed. Provide Mac model and whether you have an Apple ID or work account.
Rate this guide
Was this helpful?
Thanks for your feedback.