APFS
FileVault Drive Not Mounting
Scan only after macOS unlocks and exposes readable storage.
FileVault protects APFS data with encryption. Refindo can scan only when macOS has already unlocked the protected volume and exposed readable data. On Macs with a T2 chip or Apple Silicon, the hardware security layer adds another requirement that ties decryption to the specific Mac hardware.
First: do not make the source worse
Treat this as a recovery situation before you treat it as a repair task. The priority is to preserve readable data and avoid new writes to the affected device.
- Do not turn FileVault off or on for the affected volume before recovery.
- Do not erase the drive to remove FileVault encryption.
- Do not run repeated First Aid attempts on the encrypted volume.
- Do not save recovered files back onto the FileVault volume.
Scan and preview first
Refindo is a fit only after macOS has unlocked the FileVault-protected volume and exposed readable storage. It does not unlock FileVault, recover passwords or keys, or bypass encryption.
Likely causes
- Encrypted APFS metadata damage.
- Incorrect or unavailable password, recovery key, or user credentials that prevent macOS from unlocking the volume.
- FileVault unlock state problems after shutdown or update.
- SSD or disk instability preventing a clean unlock.
Read-only recovery workflow
- Unlock the FileVault volume in macOS with the password or recovery key.
- Open Refindo only after macOS exposes the unlocked volume as readable.
- Run Quick Scan, then Deep Scan if the unlocked volume metadata is incomplete.
- Preview recoverable files and save them to a separate, unencrypted drive.
When to stop self-recovery
- macOS cannot unlock the volume because the password and recovery key are lost.
- The FileVault volume holds the only copy of critical work.
- The internal SSD encryption is tied to a Mac whose logic board has failed.
- Disk Utility reports hardware errors or the device disappears during scans.
Related recovery guides
What You Need to Know
FileVault Recovery Key Importance
When FileVault is enabled, macOS generates a recovery key that can unlock the volume if the user password is lost or the account is inaccessible. This key is the last resort for decryption. If stored with Apple via iCloud, it can be retrieved through Apple ID authentication. If the key is lost and the password is forgotten, the encrypted data is permanently inaccessible.
T2 and Apple Silicon Security Chip Impact
On Macs with a T2 chip or Apple Silicon, FileVault encryption keys are managed by the Secure Enclave hardware. The internal SSD is always encrypted at the hardware level, even before FileVault is turned on. If the logic board fails, the Secure Enclave and its keys are lost, making it impossible to decrypt the internal SSD on a different Mac.
Frequently Asked Questions
Can Refindo recover FileVault data without a password?
No. Refindo cannot unlock, crack, recover keys, or bypass FileVault. macOS must unlock the volume first.
Should I erase the drive to remove FileVault?
No. Erasing removes the recovery target.
Can Deep Scan bypass FileVault?
No. Deep Scan requires macOS to expose readable decrypted data first.
Can I recover data from a FileVault drive if the Mac logic board died?
On T2 or Apple Silicon Macs, the internal SSD encryption is tied to the logic board. If the board fails, the SSD cannot be decrypted on another Mac. Apple or an authorized service provider may be able to help with board-level repair.
Where is my FileVault recovery key stored?
During FileVault setup, macOS offers to store the key with Apple via iCloud or display it for you to save. Check your iCloud account at iforgot.apple.com, or look for a saved copy in a password manager or printed record.
Does FileVault affect external APFS drives differently than internal ones?
Yes. External drives use software-only FileVault encryption, not the Secure Enclave. This means an encrypted external drive can be unlocked on any Mac with the correct password or recovery key.