Encrypting a Mac is like locking company data in a safe that only those with the key can open.
Imagine An HR employee at a staffing agency takes the train to a client, with his MacBook so he can process all the data right away. It's busy, he gets a call and squeezes his way out while talking. Only at home does he realise his laptop is still on the train, with all the sensitive data of the agency, its clients and its temporary workers on it.
How this story ends depends on one question: was that Mac encrypted? Business data today largely lives on devices we take everywhere. Encryption is one of the most effective ways to protect it. But what exactly is it, and why does it matter so much?
Encryption converts your data into a coded, unreadable form. Only someone with the right key or password can make it readable again. Compare it to a safe: only whoever has the key gets to see the company data.
A Mac that isn't encrypted can be read by anyone who physically gets hold of the device. Even a strong password doesn't help then.
If your Mac is lost or stolen, as in the example above, encryption is your strongest defence. Even if someone has your drive, your data is unreadable without the password or key.
Your Mac holds emails, photos, financial information and other sensitive data. Encryption protects it from prying eyes and intruders.
If you use your Mac for work, encryption protects business information, client data and confidential documents. That's especially important if you have to comply with the General Data Protection Regulation (GDPR).
Identity thieves are always looking for personal data. An encrypted Mac reduces the chance it falls into the wrong hands.
Services like OneDrive or Dropbox sync to your Mac. If an unencrypted Mac falls into the wrong hands, your cloud data is exposed as well.
Apple has encryption built in: with FileVault you encrypt your Mac's entire drive. Here's how to turn it on:
FileVault guides you through setting up a password or recovery key. After that, it encrypts and decrypts your data automatically when you unlock your Mac.
Tip Want to turn on FileVault on all your company's Macs? Do it through an MDM. That way you know for sure every Mac is encrypted, you store the recovery keys centrally so your company always has access in an emergency, and you prevent employees from turning encryption off. Read more about MDM.
Encrypting your Mac is a simple but powerful way to protect your data against loss, theft and misuse. As a company you are responsible for the privacy and security of your own data and that of your clients. A small step with a big impact.
In short
An encrypted Mac is unreadable to whoever finds or steals it FileVault is built in and turned on in minutes With MDM you enforce encryption on all company Macs and keep recovery keys safe
The information in this article is intended as general knowledge about using Apple products in a professional environment. Your organisation may have its own policies that restrict certain features or software. Always consult your organisation's IT policy before changing anything on company hardware or software.
