ICloud – How does FileVault 2 recovery key stored in iCloud work

encryptionicloudrecovery

When requested during the full disk encryption process, one option is to store the recovery key in your iCloud account.

I stored mine in iCloud, but frankly I'm confused as when I look at the drive contents I see NO files even indicating a recovery key.

So what exactly is happening? Also, how is this used during the recovery process?

Also, if you put your recovery key in iCloud, how is more than one device handled (i.e. macbooks)?

Best Answer

The recovery key absolutely isn’t stored locally by Apple, so you either need a safe place to store it where you won’t lose it or Apple will help store it for you to recover later when you choose to unlock the Mac by reading the key from iCloud.

  • in a nutshell, your iCloud password gets you your key back instead of you needing to choose where to store it (paper in a safe, 1Password app, word document, under the keyboard, screen capture of the image of your key on screen, etc...)