File encryption
FileVault privacy rating
Full-disk encryption built into macOS that encrypts the startup volume with XTS-AES-128. The recovery key can be kept locally or escrowed with an iCloud account or a device management server.
Summary
FileVault scores 45 out of 100 (grade D) on the file encryption criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets no trackers or telemetry and independent audit. It does not meet open source. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 45 out of 100. How scoring works
Criteria
- No
-
Partial
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No third-party trackers in the app, and sharing device analytics with Apple is opt-in. Apple web pages load Apple's own analytics (ac-analytics, sent to metrics.apple.com) by default.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Included with macOS, which is paid for through hardware sales. No ads in the feature.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
FileVault is Common Criteria certified against the Full Drive Encryption protection profiles, with certification and validation reports published, but no full security audit report is public.