How to set the firmware password on OS X Mavericks

OS X has many security settings, including limiting access to your computer. The user password is requested when logging into the system, unlocking the computer, as well as for applying important actions in the operating system. But what if you need an even more advanced level of protection? The highest level of security is the so-called firmware password. This is a low-level protection that locks the computer at the motherboard firmware level, not at the software level like FileVault encryption or standard login password.

Once this password is set, the Mac cannot be started using an external boot drive; start the system in single user mode; select a boot disk; reset PRAM (VRAM) and boot your computer in safe mode. For all these actions, you will need to enter the firmware password. Thus, the most reliable protection will be provided and that information from your Mac cannot be used by intruders if it is lost or stolen.

* * *

DISCLAIMER. As with other important passwords, use something tricky but memorable for the firmware-password. It is very important to keep your password in a safe place or remember it. If you lose or forget your firmware password, your Mac will not boot and you will need to contact the Apple Store or send your computer to Apple's service. On older Macs, there is a way to bypass the firmware password, unlike newer models, where you need to disconnect the battery or memory modules, or contact Apple support.

Installing firmware password on Mac

Enabling the EFI password is easy enough, but Mavericks does it a little differently than previous versions of OS X.

1. Restart the Mac and hold ⌘R in order to boot into recovery mode.

2. On the OS X Utilities screen, open the item Utilities in the menu bar and select Firmware password utility.

3. Click Enable firmware password.

4. Enter the selected password twice and press Set password (be sure to remember or write down the password so as not to lose access to the computer).

5. Click Complete the Firmware Password Utility.

After setting the EFI password, you can reboot and shutdown your Mac as usual. The system will automatically boot up to the login screen where you will be asked to enter your user password.

In what situations will you need to enter the firmware password?

A regular reboot or shutdown of the Mac will take place without entering the firmware password, but all alternative boot methods will be possible only with its obligatory input. That is, when someone tries to boot from the boot disk, in recovery mode, in Single User Mode (logging in as root), Verbose Mode (displaying diagnostic information needed to diagnose problems at boot time), Target Disk Mode (a mode in which one Mac can be used as a boot disk for another), resetting PRAM / VRAM (special memory that stores different hardware settings: screen brightness, sound volume, etc.), you will need to enter a password. firmware. Moreover, only the input field and the picture of the castle will be displayed - no prompts. If the password is entered incorrectly, nothing will happen and the system will not generate any errors.

All modern Intel-based Macs have EFI firmware (Extensible Firmware Interface), while older models use Open Firmware. The general principle remains the same, the differences will be only at the hardware level.

Should you use a firmware password?

Most users consider Firmware Password to be an overkill security measure, and for ordinary Mac users it is. For the average user, a standard login password and a screensaver password are enough - such protection will be quite effective. You can also activate FileVault encryption to give you additional guarantees of the security of your data.

If you need even more reliable protection that will protect you from resetting the user password and prevent unauthorized access to your information - use the firmware password.