Help Desk

Computing & Information Services

Mac OS X File Encryption

Encryption is a useful and simple way to protect the privacy of your files. Mac OS X (10.4 and above) include Disk Utility, a program that allows you to easily encrypt files.

Disk Utility is a versatile tool which can, among other things, create stand-alone archive files. These archives are called disk images and can be encrypted such that they are accessible only by password. Here are some basic instructions on how to create a disk image and encrypt it with a password. If you get stuck at any point during this process, contact for help.

Note: Click here for cross-platform encryption. 

See our video tutorial that demonstrates how to setup and use file encryption on a Mac:

Creating an Encrypted Archive

  1. Open the Disk Utility program.

    Open Disk Utility from the "Utilities" folder in "Applications".
  2. Create a new disk image.

    Now that Disk Utility is open, first verify that NONE of the disks, volumes, or images in the left-hand side-bar is selected. If one is, then click in the white space near the bottom of the side-bar to de-select all disks, images, and volumes. This is important for the creation of the new image.

    Then, at the bar at the top of the screen, go to File > New Image. You should see a small window slide down over top of Disk Utility.

  3. Customize your disk image.

    • In the Save As: field, type a descriptive name, e.g., lockedfiles.
    • In the Where: menu, select where you want the archive to be created (you can always move the archive later -- for now, select Desktop).
    • In the Size: menu, select the desired size.
    • In the Encryption menu, select the desired level of encryption. AES-128 (recommended) is more than adequate for most needs.
    • In the Format menu, select sparse disk image.
    • When you are done entering these settings, click Create.

    You will see a progress bar while Disk Utility creates your archive, and then a small window will appear, prompting you to...

  4. Enter a Password.

    Note: Choose a password that you will remember! If you lose the password, you will not be able to access your encrypted files and CIS won't be able to recover them. Here are some guidelines for creating strong passwords. Also, to make your encrypted disk image is truly secure...

    DO NOT ADD YOUR PASSWORD TO THE KEYCHAIN. Ensure that the check-box labeled Remember password (add to Keychain) is UNCHECKED. Otherwise, MacOS will not require the password for anyone trying to access the encrypted archive from your account.

    Click OK.

  5. Add Files to Your Encrypted Disk Image.

    If you saved the disk image to your desktop, you should see two new icons there.

  6. One of them is named something like "lockedfiles.sparseimage", and the other one will simply be named "lockedfiles".
  7. The latter of these two files is the "mounted image" of your encrypted archive: this is where you can add and remove files. Double-clicking the mounted image will open a window into which you can simply drag and drop the files you want to encrypt.
  1. Encrypt!

    When you are ready to lock up your files, eject the mounted disk image by dragging it into the Trash on the Dock. The mounted image will disappear, but the encrypted archive lockedfiles.sparseimage will remain.

  2. Decrypt!

    To retrieve your encrypted files, double-click the disk image you've created. You will be required to enter your password before your files are accessible.

If you have any questions about encrypting your data, contact Computer User Services (or ACS for administrative staff).