> As long as you had FileVault enabled (& good password management), that's basically all you needed.
Does that protect your computer if it's asleep? My guess is most Macbooks are either asleep or on 99% of the time.
Does that protect your computer if it's asleep? My guess is most Macbooks are either asleep or on 99% of the time.
$ sudo pmset -a destroyfvkeyonstandby 1
$ sudo pmset -a hibernatemode 25
> If you choose to evict FileVault keys in standby mode, you should also modify your standby and power nap settings. Otherwise, your machine may wake while in standby mode and then power off due to the absence of the FileVault key. See issue #124 for more information. These settings can be changed with: $ sudo pmset -a powernap 0
$ sudo pmset -a standby 0
$ sudo pmset -a standbydelay 0
$ sudo pmset -a autopoweroff 0
See [1] for more macOS hardening tricks.[1] https://github.com/drduh/macOS-Security-and-Privacy-Guide#fu...