APFS
FileVault Drive Not Mounting
Scan only after macOS unlocks and exposes readable storage.
Written by the Refindo Recovery Team · Published · Updated
FileVault encrypts your APFS data, and that encryption is non-negotiable for any recovery tool, Refindo included. The volume has to be unlocked by macOS, with your password or recovery key, before there's any readable data to scan. On a T2 or Apple Silicon Mac there's an extra catch: the internal SSD is hardware-encrypted by the Secure Enclave and tied to that specific machine, so its keys don't travel to another Mac. Unlock first; scanning only works on what macOS has already decrypted.
Quick answer
Decryption has to come from macOS, not from a recovery tool, so protect the unlocked state. The moment the volume is readable, scan and offload the data before adjusting FileVault or running repairs.
Do not turn FileVault off to recover
- Do not turn FileVault off or on for the affected volume before recovery.
- Do not erase the drive to strip FileVault encryption.
- Run First Aid sparingly on the encrypted volume.
- Recover to a separate, unencrypted drive rather than back onto the FileVault volume.
Why a FileVault drive won't mount
- Encrypted APFS metadata damage.
- Incorrect or unavailable password, recovery key, or user credentials that prevent macOS from unlocking the volume.
- FileVault unlock state problems after shutdown or update.
- SSD or disk instability preventing a clean unlock.
How to scan an unlocked FileVault volume
Refindo is a fit only after macOS has unlocked the FileVault-protected volume and exposed readable storage. It doesn't unlock FileVault, recover passwords or keys, or bypass encryption.
- Unlock the FileVault volume in macOS with the password or recovery key.
- Open Refindo only after macOS exposes the unlocked volume as readable.
- Run Quick Scan, then Deep Scan if the unlocked volume metadata is incomplete.
- Preview recoverable files and save them to a separate, unencrypted drive.
When the keys are gone for good
- macOS can't unlock the volume because the password and recovery key are lost.
- The FileVault volume holds the only copy of critical work.
- The internal SSD encryption is tied to a Mac whose logic board has failed.
- Disk Utility reports hardware errors or the device disappears during scans.
FileVault keys and the Secure Enclave
FileVault Recovery Key Importance
When FileVault is enabled, macOS generates a recovery key that can unlock the volume if the user password is lost or the account is inaccessible. This key is the last resort for decryption. If stored with Apple via iCloud, it can be retrieved through Apple ID authentication. If the key is lost and the password is forgotten, the encrypted data is permanently inaccessible.
T2 and Apple Silicon Security Chip Impact
On Macs with a T2 chip or Apple Silicon, FileVault encryption keys are managed by the Secure Enclave hardware. The internal SSD is always encrypted at the hardware level, even before FileVault is turned on. If the logic board fails, the Secure Enclave and its keys are lost, making it impossible to decrypt the internal SSD on a different Mac.
Frequently Asked Questions
Can Refindo recover FileVault data without a password?
No. Refindo can't unlock, crack, recover keys, or bypass FileVault. macOS must unlock the volume first.
Should I erase the drive to remove FileVault?
No. Erasing removes the recovery target.
Can Deep Scan bypass FileVault?
No. Deep Scan requires macOS to expose readable decrypted data first.
Can I recover data from a FileVault drive if the Mac logic board died?
On T2 or Apple Silicon Macs, the internal SSD encryption is tied to the logic board. If the board fails, the SSD can't be decrypted on another Mac. Apple or an authorized service provider may be able to help with board-level repair.
Where is my FileVault recovery key stored?
During FileVault setup, macOS offers to store the key with Apple via iCloud or display it for you to save. Check your iCloud account at iforgot.apple.com, or look for a saved copy in a password manager or printed record.
Does FileVault affect external APFS drives differently than internal ones?
Yes. External drives use software-only FileVault encryption, not the Secure Enclave. This means an encrypted external drive can be unlocked on any Mac with the correct password or recovery key.
Scan before you repair
Run a read-only scan first, preview what is recoverable, then save selected files to a different drive.