If you manage Macs remotely — whether it’s a home server, a Mac mini in another location, or you’re an IT admin — you’ve probably run into this nightmare:
You reboot the Mac for updates or maintenance, but because FileVault is turned on (full-disk encryption), it gets stuck at the pre-boot login screen. No SSH, no Screen Sharing, no remote access until someone physically types in the password. Super frustrating!
How do you reboot safely and land directly at the normal macOS login screen so you can reconnect remotely. This works for most setups using Apple’s built-in tools. Let’s dive in!
Quick explanation: FileVault encrypts your entire drive. When the Mac restarts, it loads a minimal environment that asks for a password (or recovery key) before the full operating system boots and networking starts. That’s why remote tools can’t connect.
The good news? Apple provides a one-time authenticated restart that bypasses this for the next boot.
Before you start
- You need SSH or Screen Sharing (Remote Management) access to the Mac right now.
- Admin privileges on the Mac.
- FileVault must be enabled (obviously).
- Know the password for a FileVault-enabled user account (usually your main admin account) or the recovery key.
Important safety note: Always back up important data, and test this in a non-critical environment first.”
“Step 1: Connect to your Mac remotely via SSH or Terminal (on another Mac).
Open Terminal and SSH in:ssh yourusername@your-mac-ip-or-hostname
Step 2: Run the magic command:
sudo fdesetup authrestart
(note: you can just run this command on the machine via remote connection to do the reboot without Ssh into the machine)
You’ll be prompted for your admin password. Enter it.
The Mac will immediately reboot.
After reboot, the drive unlocks automatically using the stored credentials for this one boot only, and you’ll land at the normal macOS login screen. Now you can reconnect with Screen Sharing, VNC, or SSH normally!”
Pro tip: Check if your Mac supports it first:fdesetup supportsauthrestart
It should return true on supported hardware.
Security warning: Handle passwords carefully — never leave them in plain text long-term!
If you’re on macOS Tahoe or newer, there’s even better news! Apple added the ability to unlock FileVault over SSH after a reboot.
With Remote Login enabled:
- SSH in (it’ll say the system is locked).
- Enter your credentials to unlock.
- The full OS loads, and you get normal access.
This is a game-changer for headless setups!
- Delay the restart:
sudo fdesetup authrestart -delayminutes 5(waits 5 minutes). - Third-party tools: Tools like Password Utility from Twocanoes can make authenticated restarts easier for fleets.
- Disable FileVault? Only if security allows — not recommended for most users.
- Limitations: Power outages or forced reboots may still require physical access. Always have the recovery key stored safely.
Never share your recovery key publicly!
Link to the Video on this Command:
Useful Links: