Encrypted Mac Volume Not Showing Until Unlocked?
If you have an encrypted Mac volume (like a FileVault-protected startup disk or an encrypted external drive) that doesn’t appear in Finder or Disk Utility until you unlock it, that’s normal behavior by design—the system hides encrypted volumes until you authenticate. This article explains why macOS does this, how to work with it, and what to do if a volume never appears even after unlocking.
Why macOS Hides Encrypted Volumes
macOS uses several encryption methods, but the most common are FileVault (for the startup disk) and encrypted APFS volumes (for external drives or additional partitions). When a volume is encrypted, its file system is not readable until the correct password or recovery key is provided. To prevent errors and protect your data, macOS intentionally does not mount—or even list—the volume until it is unlocked. This is different from a simple password-protected disk, which may show up but require a password to mount.
For external drives, the hiding is more noticeable: the drive may not appear in Finder, on the Desktop, or in Disk Utility’s sidebar until you open the Disk Utility app and click the “Mount� button (which prompts for the password). This is a security feature, not a bug. It prevents unauthorized users from seeing that the drive exists, let alone accessing its contents.
How Encryption and Mounting Work on Mac
When you encrypt a volume with Disk Utility (using APFS encrypted format), macOS creates a logical volume that is wrapped in encryption. The volume’s metadata is stored in a protected area. On startup or when you connect the drive, macOS reads the disk’s partition map but does not load the encrypted volume’s file system until you provide the correct password or recovery key. Only then does it “unlock� the volume and make it available at a mount point, such as /Volumes/MyDrive.
For FileVault on the internal drive, the process happens at boot: the system shows a login window even before the OS is fully loaded. Once you enter your password, the disk is decrypted and macOS boots normally. If you don’t enter a password, the disk remains locked and the system won’t start.
What to Do When an Encrypted Volume Isn’t Showing
If you have an encrypted volume that is not appearing at all—even after you think you’ve unlocked it—try these steps in order:
- Check Disk Utility: Open Disk Utility (from Applications/Utilities). Look in the sidebar under “External� or “Internal.� If you see a grayed-out volume with a lock icon, select it and click the “Mount� button in the toolbar. Enter the password when prompted.
- Use the terminal: If Disk Utility doesn’t show it, open Terminal and run
diskutil listto see all disks and partitions. If you see an entry that says “(encrypted)� and “locked,� rundiskutil apfs unlockVolumefollowed by the volume identifier (e.g.,diskutil apfs unlockVolume disk2s1). You’ll be prompted for the password. - Check the connection: For external drives, try a different port or cable. A loose connection can prevent the drive from being recognized at all.
- Restart your Mac: Sometimes the disk management daemon gets stuck. A restart often resolves it.
- Verify the disk: If the volume still doesn’t appear, run First Aid in Disk Utility on the physical disk (the parent entry, not the encrypted volume).
If none of these work, the volume may be damaged or the password may have been forgotten. In that case, you may need to use Recovery Mode or a data recovery service—but note that without the password, the data is cryptographically inaccessible.
Common Misconceptions and Pitfalls
One common misconception is that an encrypted volume should show up in Finder as “locked� and then ask for a password when you click it. That’s how some other operating systems handle it, but macOS does not. Instead, the volume is hidden entirely until you explicitly unlock it via Disk Utility or the terminal. This catches many users off guard, especially when they connect an encrypted external drive and see nothing happen.
Another pitfall is confusing “encrypted� with “password-protected� or “firmware password.� A firmware password (set in Startup Security Utility) prevents booting from other disks, but it doesn’t encrypt the drive. Similarly, a simple password on a disk image (.dmg) is not full-disk encryption—it’s just a password on a container. The behavior of hiding until unlock is specific to FileVault and encrypted APFS volumes.
How to Choose Between Encryption Options
If you’re setting up a new drive, you have several options. Here’s how to decide:
- FileVault (internal drive): Use this for your startup disk. It encrypts the entire system and requires a password at boot. It’s the default on modern Macs.
- Encrypted APFS (external drive): Choose this for external drives when you want full-disk encryption. The drive will not mount until you unlock it.
- APFS (not encrypted): Use this if you don’t need encryption and want the drive to mount automatically.
- ExFAT or FAT32: These are not encrypted and are compatible with Windows. If you need cross-platform encryption, consider using a third-party tool like VeraCrypt (but that’s beyond this article).
When you encrypt an external drive, macOS will ask for a password and a recovery key. Keep the recovery key in a safe place—if you lose both the password and the key, the data is gone forever.
Safety and Data Recovery Considerations
Encryption is strong, but it’s not a backup. If you forget your password, there is no backdoor. Apple provides a recovery key (a long string of characters) when you enable FileVault, and you can also use your iCloud account to reset the password if you set that up. For external encrypted volumes, you must remember the password—there is no iCloud recovery.
If you suspect the drive is failing, do not attempt to unlock it repeatedly. Instead, stop using it and consult a data recovery specialist. However, note that if the drive is encrypted and you don’t have the password, even a specialist cannot recover the data—the encryption is mathematically strong.
Alternatives to Full-Disk Encryption
If you find the “hidden until unlocked� behavior inconvenient, you have alternatives:
- Encrypted folder or disk image: Create an encrypted .dmg file (via Disk Utility) that mounts like a regular disk. It will appear in Finder as a mounted volume only after you enter the password, but the .dmg file itself is visible. This is less secure because the existence of the file is known.
- FileVault with a “firmware password� for extra security: This doesn’t change the mounting behavior, but it adds a layer of security at boot.
- Third-party encryption tools: Some tools allow you to mount encrypted volumes automatically after login, but they may not be as tightly integrated with macOS.
Frequently Asked Questions
Why doesn’t my encrypted external drive show up on the Desktop?
Because it’s encrypted, macOS does not mount it automatically. You need to open Disk Utility, select the drive, and click “Mount.� After entering the password, it will appear on the Desktop and in Finder.
Can I make an encrypted volume show up without unlocking it?
No, that would defeat the purpose of encryption. The whole point is that the data is unreadable until you authenticate. The only way to see the volume’s name (but not its contents) is to run diskutil list in Terminal, which shows the encrypted volume as “locked.�
What if I forgot the password for an encrypted external drive?
If you didn’t save the recovery key (if one was given), there is no way to unlock it. The data is permanently inaccessible. This is a hard truth of encryption. Always store your password and recovery key in a secure password manager.
Is it safe to disconnect an encrypted drive without ejecting?
If the drive is locked (not mounted), it’s safe to unplug. If it’s mounted and you’ve unlocked it, you should eject it properly to avoid data corruption. When you eject, macOS will automatically re-lock the volume.
Does FileVault slow down my Mac?
Modern Macs have dedicated encryption hardware, so the performance impact is negligible for everyday use. You may notice a slight slowdown when copying very large files, but it’s usually not noticeable.
Can I encrypt only a folder instead of the whole drive?
Yes, you can create an encrypted disk image (a .dmg file) that acts like a folder. It’s a single file that you can move around, and it mounts as a volume when you double-click it and enter the password. This is a good option if you only need to protect a few sensitive files.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.