How to Encrypt a USB Drive on macOS

Encrypting a USB drive on macOS protects your files with a password, so if the drive is lost or stolen, nobody can read the data without the passphrase. This guide shows you two built-in methods: Finder’s quick encryption for new drives and Disk Utility’s more flexible option for existing drives. You’ll need a Mac running macOS 10.13 or later and a USB drive you’re willing to erase (if using Disk Utility) or one that’s already empty.

What You’ll Need

• A Mac running macOS High Sierra (10.13) or newer.
• A USB flash drive, external SSD, or hard drive.
• Time to back up any data already on the drive – encryption will erase it in most cases.

Step-by-Step

Method 1: Encrypt a New or Empty Drive via Finder

1. Plug the USB drive into your Mac. It appears on the Desktop or in a Finder window under Locations.
2. Open a new Finder window (click the Finder icon in the Dock).
3. Right-click (or Control-click) the drive’s icon in the sidebar or on the Desktop.
4. Choose Encrypt from the context menu. If you don’t see this option, the drive already has content or is formatted in a way that doesn’t support it – use Method 2 instead.
5. Enter a strong password in both fields. Write it down somewhere safe – if you forget it, the data is unrecoverable.
6. Click Encrypt. macOS starts converting the drive, which can take a few minutes depending on size. You can keep using your Mac, but don’t unplug the drive until it’s done.
7. When finished, the drive’s icon shows a small padlock. Eject and reconnect it – you’ll be prompted for the password before it mounts.

Method 2: Erase and Encrypt an Existing Drive with Disk Utility

1. Back up any files on the USB drive – this process erases everything.
2. Open Disk Utility (Finder > Applications > Utilities > Disk Utility).
3. In the sidebar, select your USB drive (the top-level item, not the volume underneath it).
4. Click Erase in the toolbar.
5. Choose a name for the drive.
6. Set Format to Mac OS Extended (Journaled, Encrypted) or APFS (Encrypted). APFS is the modern default for macOS 10.13+, but Mac OS Extended works on older Macs.
7. Leave Scheme as GUID Partition Map (default).
8. Click Erase. A dialog asks you to create a password – enter it twice and add a hint if you like.
9. Click Choose, then Erase again. Disk Utility formats the drive and encrypts it. This may take a few minutes.
10. When done, the drive mounts only after you enter the password. Eject and reconnect to test it.

Common Mistakes

• Choosing the wrong drive in Disk Utility. Double-check you’re erasing the USB drive, not your internal disk. The sidebar shows internal drives at the top – look for the external drive under External.
• Forgetting the password. There is no backdoor. If you lose the password, the data is permanently inaccessible. Use a password manager.
• Unplugging mid-encryption. This can corrupt the drive. Wait for the process to finish, and eject properly.
• Using FAT32 or exFAT. Finder’s Encrypt option only works on drives formatted as APFS or Mac OS Extended. For cross-platform drives, you’ll need third-party software (not covered here).
• Assuming encryption is instant. Large drives can take a long time. Plan accordingly.

Tips

• Use a strong password – at least 12 characters with upper/lowercase, numbers, and symbols. macOS uses AES-256 encryption, which is strong, but a weak password undermines it.
• Store the password in your Mac’s Keychain by checking Remember password in my keychain when prompted – this lets your Mac auto-unlock the drive, but only on that Mac.
• For drives you use with Windows too, consider using a separate encrypted container (like a .dmg) instead of encrypting the whole drive, since macOS encryption isn’t readable on Windows.
• Test the encryption by ejecting and reconnecting the drive before relying on it.
• Keep a backup of the encrypted drive’s contents – encryption doesn’t protect against hardware failure.

Troubleshooting

• Drive doesn’t show the Encrypt option. The drive is probably formatted as FAT32, exFAT, or NTFS. Back up your data, then use Disk Utility to reformat it as APFS or Mac OS Extended, then encrypt.
• Encryption fails or hangs. Try a different USB port, connect the drive directly (no hub), and ensure the drive is healthy. If it still fails, the drive may be failing – check with Disk Utility’s First Aid.
• Can’t remember the password. Unfortunately, there’s no recovery. If you have a backup, erase the drive and start over. If not, the data is lost.
• Drive mounts without asking for password. This happens if you checked “Remember password in my keychain” and you’re logged into the same Mac account. To force password prompt, go to Keychain Access, find the drive’s item, and delete it.
• Drive not recognized after encryption. Reconnect it. If it still doesn’t appear, open Disk Utility – it should show as an encrypted volume. If not, try a different Mac or port.
• Error: “The operation couldn’t be completed.” This often means the drive is corrupted. Run First Aid in Disk Utility, then try again. If that fails, the drive may be beyond repair.

Frequently Asked Questions

Can I encrypt a USB drive that already has files on it without erasing them?

Yes, if the drive is formatted as APFS or Mac OS Extended. Right-click the drive in Finder and choose Encrypt – macOS converts it in place, keeping your files. If the drive is FAT32 or exFAT, you must back up, reformat, and then copy files back.

Will the encrypted USB drive work on Windows?

No. macOS’s built-in encryption (FileVault for drives) is not readable on Windows. For cross-platform use, create an encrypted disk image (.dmg) or use third-party software like VeraCrypt.

How long does encryption take?

It depends on the drive’s size and speed. A 32GB USB 3.0 drive might take 5-10 minutes; a 1TB external hard drive could take over an hour. You can keep using your Mac, but avoid unplugging the drive.

What happens if I forget the password?

There is no way to recover the data. The encryption is designed to be unbreakable without the password. Always store your password in a password manager or write it down and keep it in a safe place.

Can I encrypt an external drive that I also use with Time Machine?

Yes. Time Machine backups can be encrypted. When you set up Time Machine, choose Encrypt backups and enter a password. Alternatively, encrypt the drive first, then use it for Time Machine – it will work.

Is the encrypted drive slower than a normal one?

Yes, slightly. Encryption adds overhead, but on modern Macs with USB 3.0 or Thunderbolt, the difference is usually negligible for everyday file transfers.

Related

• How to Record Guitar on PC with Reaper DAW
• Outlook 0x80004005 Error: Fix the Operation Failed
• Stop Chrome Auto-Opening on Windows Startup