Before Apple updated Intel Macs with the T2 Security Chip and FileVault, the company offered another way to deter certain types of physical attacks. Intel Mac owners can set a firmware password, which prevents the Mac from being used to boot from any volume other than the one configured during a reboot or cold boot.
Apple eliminated the problem with the Apple chip entirely by adding low-level security policies and other system drives that prevent an M-series Mac from booting with an arbitrary volume. (This also made it difficult to create a bootable backup if a drive failed, but SSDs, the only built-in option for M-series Macs, are much more reliable than hard drives.)
If you own or are planning to purchase an Intel Mac and want to know how to remove the firmware password, the process is simple:
- Turn on or restart your Mac, then immediately hold down Command-R until you see the progress bar below the Apple icon.
- In macOS Recovery, the special startup mode, choose Utilities > Startup Security Utility (or, for older Macs, Utilities > Firmware Password Utility).
- Click Disable Firmware Password.
- When prompted, enter the firmware password. If you buy the Mac or plan to buy it, the seller should provide it to you. There is no way to bypass or reset it yourself (one exception is noted below).
- Exit the utility.
- Choose > Restart.
Apple can reset the firmware password in person at an Apple Store or a store that is an authorized service provider. However, the company has always required proof of purchase from the original owner, and then proof of identity from the person holding that receipt (digital or paper). As far as I know, if you are a secondary or subsequent purchaser, Apple or third-party personnel will not unlock the firmware.
This Mac 911 article is a response to a question submitted by igamesnews reader Anthony.
Ask Mac 911
We’ve compiled a list of our most frequently asked questions, along with answers and links to topics: read our awesome FAQ to see if your question is answered. If not, we’re always looking for new problems to solve! Email yours to [email protected] , including screenshots if necessary and whether you’d like your full name to be used. Not all questions will be answered; we don’t respond to emails, and we can’t provide direct troubleshooting advice.
