How to Format and Encrypt a Drive for macOS Using APFS (Encrypted)

Data security is a top priority for Mac users, whether you’re protecting sensitive files, backups, or an entire startup disk. macOS offers built-in encryption tools to safeguard your data, and APFS (Apple File System) with encryption is one of the most efficient and secure methods available.

APFS was introduced in macOS 10.13 (High Sierra) and is optimized for modern SSDs, offering faster performance, better space efficiency, and robust encryption. Unlike older formats like Mac OS Extended (HFS+), APFS with encryption provides seamless integration with macOS while keeping your data safe from unauthorized access.

In this guide, we’ll walk you through how to format and encrypt a drive (external or internal) using APFS (Encrypted) on macOS. Whether you’re setting up a new external SSD, encrypting a Time Machine backup drive, or securing your Mac’s internal storage, this method ensures your data remains protected.

Why Choose APFS (Encrypted) Over Other Formats?

Before diving into the steps, let’s explore why APFS (Encrypted) is the best choice for most macOS users:

✅ Faster Performance

APFS is designed for SSDs and NVMe drives, offering near-instant file operations.
Encryption adds minimal overhead compared to HFS+.

✅ Space Efficiency

APFS uses sparse files and copy-on-write to save space.
Encrypted APFS volumes don’t waste storage like some older encryption methods.

✅ Seamless macOS Integration

Works natively with FileVault (macOS’s built-in full-disk encryption).
Supports Time Machine backups without extra steps.
No need for third-party tools like VeraCrypt (unless you need cross-platform compatibility).

✅ Strong Security

Uses AES-XTS or AES-CBC encryption (military-grade security).
Password-protected with PBKDF2 key derivation (resistant to brute-force attacks).
Supports FileVault 2 for full-disk encryption on internal drives.

❌ When NOT to Use APFS (Encrypted)

Windows Compatibility: APFS is not natively supported on Windows (use ExFAT or NTFS if sharing with Windows).
Older macOS (Pre-10.13): If you’re on macOS 10.12 or earlier, use Mac OS Extended (Journaled, Encrypted)instead.
Network/NAS Drives: APFS is not ideal for network storage (use SMB with encryption instead).

Prerequisites

Before formatting and encrypting your drive, ensure you have:

✔ A macOS computer running macOS 10.13 (High Sierra) or later. ✔ An external or internal drive (SSD recommended for best performance). ✔ A backup of important data (formatting erases everything!). ✔ A strong password (mix of letters, numbers, and symbols).

Step-by-Step Guide: Format & Encrypt a Drive with APFS (Encrypted)

Method 1: Using Disk Utility (GUI)

This is the easiest way for most users.

Step 1: Connect Your Drive

Plug in your external SSD/HDD or ensure your internal drive is accessible.
Open Disk Utility (Go to Applications > Utilities > Disk Utility).

Step 2: Select the Drive

In the sidebar, choose the physical drive (e.g., “SanDisk Extreme” or “Apple SSD”).
- ⚠️ Warning: Selecting the wrong drive will erase all data permanently. Double-check!
If you want to encrypt a specific partition, select it instead.

Step 3: Click “Erase”

Click the Erase button in the toolbar.

Step 4: Configure Format & Encryption

A pop-up window will appear with formatting options. Fill in the details as follows:

Copy table

Option	Recommended Setting	Notes
Name	Give your drive a name (e.g., “SecureBackup”)	Optional but helpful for identification.
Format	APFS (Encrypted)	Best for macOS 10.13+.
Scheme	GUID Partition Map	Required for Intel/Apple Silicon Macs.

Step 5: Set a Secure Password

After clicking Erase, a prompt will ask for:
- Password: Enter a strong password (at least 12 characters, mix of cases, numbers, and symbols).
- Hint: (Optional) A subtle hint in case you forget.
- Store in Keychain: Check this if you want macOS to remember the password (convenient but less secure if others access your Mac).
Click Choose to proceed.

Step 6: Complete the Erase Process

Disk Utility will now:
1. Format the drive as APFS.
2. Encrypt the volume.
3. Mount the drive for immediate use.
Once done, the drive will appear in Finder and is ready to use!

Best Practices for APFS Encryption

🔒 Password Security

Never reuse passwords for your encrypted drive.
Use a password manager (like 1Password or Bitwarden) to store it securely.
Avoid storing the password in plaintext (e.g., in a Notes file).

🔄 Regular Backups

Even encrypted drives can fail. Use Time Machine or another backup solution.
Store backups on another encrypted drive for redundancy.

🚫 Avoid These Mistakes

Don’t format as ExFAT/NTFS if you need encryption (these formats don’t support it).
Don’t use MBR (Master Boot Record)—it’s incompatible with modern Macs.
Don’t disable FileVault on an internal drive unless necessary (it weakens security).

🔄 Cross-Platform Considerations

If you need Windows compatibility, format as ExFAT (no encryption) or use VeraCrypt for encrypted containers.
For Linux, APFS has limited support—consider LUKS encryption instead.
Conclusion
Encrypting your drive with APFS (Encrypted) is one of the best ways to protect your data on macOS. Whether you’re securing an external SSD, a Time Machine backup, or your Mac’s internal storage, APFS offers speed, efficiency, and strong security—all built into macOS.
By following this guide, you’ve taken a crucial step toward data privacy and security. Remember to: ✅ Use a strong, unique password. ✅ Regularly back up your data. ✅ Keep your macOS updated for the latest security patches.
Now, your drive is fully encrypted and ready for safe use—enjoy peace of mind knowing your files are protected!

Additional Notes

✅ For External Drives:

Works with USB, Thunderbolt, or external SSDs/HDDs.
Encryption is hardware-independent (works on any drive).

✅ For Internal Drives (e.g., replacing a Mac’s startup disk):

Follow the same steps, but select the internal drive (e.g., “APPLE SSD”).
After formatting, reinstall macOS (if needed) via Recovery Mode.

✅ Changing Encryption Later?

You can encrypt an existing drive without reformatting using:
- Finder (right-click drive > Encrypt “Drive Name”).
- Terminal (diskutil enableVolumeEncryption /dev/diskXsY).

❌ Avoid These Mistakes:

Don’t choose ExFAT or FAT32 (no encryption support).
Don’t use Master Boot Record (MBR) scheme (not compatible with modern Macs).

Troubleshooting

🔹 Drive Not Showing Up?

Check connections, try a different USB port/cable.
Open Terminal and run diskutil list to see if the drive is detected.

🔹 Forgot Password?

If stored in Keychain, it’s retrievable.
Otherwise, the data is permanently inaccessible (no recovery).

🔹 Slow Performance?

Encryption adds minimal overhead on modern SSDs.
On HDDs, it may slow down writes slightly.