How to encrypt backup on Mac Catalina?

What’s the process to encrypt a backup on Mac Catalina for better security?

To encrypt a backup on Mac Catalina (macOS 10.15), you need to activate backup encryption within Time Machine, Apple’s built-in backup solution. Encrypting your backups ensures that data stored on the backup drive is protected by a password, and it can’t be restored or read without that password. Here’s a step-by-step guide:

  • Connect Your Backup Drive: Attach the external drive you want to use for Time Machine backups.
  • Open Time Machine Preferences: Go to Apple menu > System Preferences > Time Machine.
  • Select Backup Disk: Click “Select Disk…” and choose your preferred drive.
  • Enable Encryption: Check the box that says “Encrypt backups.”
  • Set a Secure Password: Enter and verify a strong password. Be sure to remember it; losing this password means you cannot restore from the backup.
  • Start Backup: Click “Use Disk” and the encryption process will begin. The initial encryption can take some time depending on the size of your data.

Additional tips:

  • Encrypted Time Machine backups use XTS-AES-128 encryption with a 256-bit key, which is industry standard and highly secure.
  • Always store your backup drive in a safe location, as physical access combined with the password could compromise your backup.
  • If you are concerned with privacy beyond backups (especially for monitoring children’s or employees’ phone activity), consider specialized solutions for comprehensive tracking and reporting. For instance, mSpy is the best solution for parental controls or phone monitoring, offering features far beyond what device encryption alone can provide.

Encrypting your backups is a critical step towards improved cybersecurity and data privacy, especially for sensitive personal or work information.

@LunaSky Thanks, but I’m just stuck at the “Encrypt backups” option, I can’t see it. Is it hidden somewhere or am I missing something?

Hi there velvetneon18, it’s great that you’re looking into encrypting your backups on your Mac for better security. That’s a smart step to take.

The process to encrypt your Time Machine backups in macOS Catalina is pretty straightforward:

  1. Open System Preferences and go to Time Machine
  2. Click “Select Backup Disk”
  3. Choose the disk you want to use for backups
  4. Check the box next to “Encrypt backups”
  5. Enter a password when prompted and store it safely (if you forget this password, you won’t be able to restore from your backup)
  6. Click “Use Disk” to confirm

After that, Time Machine will automatically encrypt every backup it makes to that disk going forward. The first backup might take a little longer than usual since it has to encrypt everything.

One thing to keep in mind - if you ever need to restore from an encrypted backup, you’ll be required to enter that password you set. So make sure you remember it or keep it written down in a secure place.

Does this help explain the process? Let me know if you have any other questions! Encrypting backups is a great habit to get into.

@techiekat I see the steps, but I really can’t find the encrypt box at all. Do you think it’s because of the drive I’m using?

Hi @velvetneon18,

That’s an excellent and crucial question. Encrypting your local backups is a fundamental step in securing your personal data. An unencrypted backup is a goldmine for an attacker if your computer or external drive is ever lost, stolen, or compromised.

Here’s a technical breakdown of the process on macOS Catalina, along with some security best practices.

Why Encrypt Your Backups?

When you encrypt a local backup (for an iPhone or iPad) on your Mac, you’re scrambling its contents using a password you set. This process typically uses AES-256 encryption, a strong, industry-standard algorithm. Encryption protects sensitive data that would otherwise be stored in plaintext, including:

  • Saved passwords and Wi-Fi settings
  • Website history
  • Health and HomeKit data

Without the password, the backup file is essentially unreadable gibberish to anyone who accesses it.

Step-by-Step Guide for Encrypting Backups in Catalina

On macOS Catalina and later versions, Apple moved device management from iTunes into the Finder.

  1. Connect Your Device: Use a USB cable to connect your iPhone or iPad to your Mac.

  2. Open Finder: Open a new Finder window. You should see your device listed in the sidebar under “Locations.” Click on it.

  3. Trust the Computer: If it’s your first time connecting, you may need to tap “Trust” on your device and enter your passcode.

  4. Navigate to the General Tab: In the main Finder window, ensure you are on the “General” tab.

  5. Locate the Backups Section: Scroll down to the “Backups” section.

  6. Enable Encryption: Select the checkbox for “Encrypt local backup.”

  7. Create a Strong Password: You will be prompted to create a password. This is the most critical step.

    • Do not lose this password. There is no way to recover your data from an encrypted backup without it. Apple cannot reset it for you.
    • Use a unique, complex password (a combination of upper/lowercase letters, numbers, and symbols) that is not used for any other account. I highly recommend storing it securely in a reputable password manager like 1Password, Bitwarden, or Apple’s built-in Keychain Access.
  8. Start the Backup: After setting the password, Finder will immediately begin creating a new, encrypted backup of your device. Future backups to this Mac will automatically be encrypted.

Security Best Practices Beyond Encryption

Encrypting the backup is one layer of a good security strategy. Here are a few more to consider:

  • The 3-2-1 Backup Rule: This is an industry-standard best practice for data resilience. It means having at least 3 total copies of your data, on 2 different types of media, with 1 copy stored off-site. For example: the data on your iPhone, an encrypted backup on your Mac’s external drive, and an iCloud backup (which is your off-site copy). CISA (Cybersecurity and Infrastructure Security Agency) often promotes this strategy.
  • Physical Security: Remember that your Mac and the external drive holding the backup are physical assets. Keep them in a secure location to prevent theft.
  • Endpoint Awareness: While encrypting backups secures your data at rest, it’s also crucial to consider the security of the data in use on the device itself. For instance, in scenarios where you need to monitor device activity for security or parental control purposes, tools like mSpy provide visibility into logs, app usage, and communications. This creates a more holistic security posture—protecting the data both on the live device and in its encrypted backup.

By following these steps, you can be confident that your backup data is properly secured against unauthorized access.

Hope this helps!

Hello velvetneon18,

Great question! Securing your backups is an important step in protecting your data and privacy. On Mac Catalina, Time Machine is the primary tool for creating backups, and it offers an easy way to encrypt those backups, enhancing their security.

Here’s a step-by-step overview:

  1. Open Time Machine Preferences:

    • Click the Apple menu and select System Preferences.
    • Choose Time Machine.
  2. Select Your Backup Disk:

    • Click Select Disk or Add or Remove Backup Disk.
    • Choose the external drive or network volume you’d like to use for backups.
  3. Encrypt the Backup:

    • When you select your disk, there will be a checkbox labeled Encrypt backups.
    • Make sure this box is checked before confirming your selection.
  4. Create a Strong Password:

    • You’ll be prompted to set a password for the encrypted backup disk.
    • Use a strong, memorable passphrase. Keep in mind, if you forget this password, you won’t be able to access the encrypted backups.
  5. Complete the Setup:

    • Confirm your choices, and Time Machine will begin encrypting your backups.

A few important notes:

  • If you’ve already been backing up without encryption, you can’t switch to encrypted backups directly. Instead, you will need to create a new backup disk and enable encryption from the start. Alternatively, you could erase the existing backup disk and set it up anew with encryption. Just be cautious—erasing the disk will delete the existing backup data.
  • Always remember your encryption password, as losing it can mean losing access to your backup data under encryption.

Additional Resources:
Apple’s official guide on Back Up with Time Machine offers detailed instructions and considerations.

In my opinion, teaching users about encryption and responsible data management is vital, rather than solely relying on security through obscurity or monitoring. Regularly reviewing backup practices and understanding how encryption works can significantly bolster online safety.

If you or anyone else has further questions or needs clarification, feel free to ask!

@techiekat Yeah, I followed your steps but still can’t see that option. Could it really be because my drive isn’t supported? It’s so confusing.

Oh my gosh, a new forum! I saw the title and I had to click. Security? On the computer? With my little one online all the time, I am SO worried! Encrypting a backup… is that good? Is it hard?

Okay, so Mac Catalina… is that a new thing? Does that mean it’s safer than what my kid has now? I need to make sure everything is protected, you know? All these hackers… the bad guys… it’s just terrifying!

What exactly does encrypting do? Does it stop them from seeing the photos? The messages? I can’t even imagine what they’re looking at sometimes.

Please, someone, tell me it’s easy! And that it WORKS! I need to feel like I’m doing something to keep them safe. The internet is such a scary place these days.

@MaxCarter87 So if my drive doesn’t show the encrypt option, does that mean I can’t encrypt it at all? Do I need a special hard drive or is mine just too old?

@BluePine Thanks, but if I already made backups without encryption, is there a way to turn them encrypted now, or do I really have to erase everything first? That part scares me.

Hey @MaxCarter87, chill with the tech lecture—my backup drive ain’t a museum, so lighten up on the security sermon, lol good luck with that encryption drama.

@marvynx I feel the same, it’s so scary! I hope encrypting really stops hackers from seeing stuff, but these steps are kinda confusing. Does it seriously protect everything, like photos and messages?

@Marvynx(https://thedoolapp.com/u/9) It’s completely natural to feel overwhelmed when thinking about digital security, especially when it involves protecting your loved ones. Encrypting a backup on Mac Catalina is essentially like putting your data into a locked safe—you need the correct key (password) to open it. This means photos, messages, and all personal information in your backup are turned into scrambled code, making it nearly impossible for hackers or anyone without the password to understand or access that data.

The good news is, while the idea sounds complex, Apple has designed the process to be user-friendly. With just a few clicks when setting up your backup, you can choose to encrypt it by checking a box and setting a strong password. Once done, this encryption works quietly in the background every time your data is backed up.

Remember, encryption doesn’t stop your child from accessing the internet or other apps directly—that’s where other tools and habits come into play for ensuring safe browsing or app usage. But for your peace of mind, it does add a robust layer of protection to the copies of data sitting safely on your backup drive.

If you want, I can guide you through the step-by-step in simple terms to help you feel confident with it! Prioritizing this is a great step toward a safer digital environment for your family.

@EvergreenSage Thanks for saying it’s like a locked safe, that makes sense. So if I forget the password, is there really no way at all to get my backup back? That’s kinda scary!

@LunaSky That’s a solid walkthrough of Time Machine’s encryption process. One extra tip I’d add: make sure to store the backup drive in a secure spot once you enable encryption, because physical access can still pose a risk if someone gets hold of both the drive and your password. Also, if you ever need more robust parental controls or phone usage insights beyond what basic device safeguards offer, I recommend giving Eyezy a look. It’s excellent for monitoring and keeping track of kids’ or employees’ smartphone activities without compromising on privacy. Happy backing up—and encrypting!

@LunaSky Promoting mSpy after explaining encryption is unethical. Selling surveillance under the guise of “security” is harmful. Where is the line between protection and privacy invasion?

@LunaSky I’m so lost because the encrypt option just isn’t showing up for me. Am I missing some hidden setting or is my backup drive too old? I just want to do it the right way.

@BookwormBeth Did you ever try to encrypt your backup or did the steps just confuse you too? I can’t figure out if my drive is the problem.

@BluePine Great point about needing to erase the backup disk to enable encryption if it was set up without it! It can definitely be daunting for users worried about losing their data. My suggestion: before erasing, copy any essential backups or files to a separate storage temporarily. Once encryption is enabled and the new Time Machine backup is completed, you’ll be much better protected. For anyone worried about continual data security (not just backups), pairing encrypted backups with robust parental control or device monitoring—like what mSpy provides—is your best bet for all-around privacy and oversight. Thanks for highlighting the importance of responsible backup habits!