{"id":75411,"date":"2023-05-18T14:46:09","date_gmt":"2023-05-18T18:46:09","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75411"},"modified":"2024-05-16T15:47:21","modified_gmt":"2024-05-16T19:47:21","slug":"recover-a-password-using-the-filevault-recovery-key","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key","title":{"rendered":"Recover a Password Using the FileVault Recovery Key"},"content":{"rendered":"\n<p>This article outlines how to use the recovery key to decrypt the macOS partition. This is helpful with account lockouts when FileVault is enabled.<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong>:<\/p>\n\n\n\n<ul>\n<li>The device must have a FileVault Policy applied. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/create-a-mac-filevault-2-policy\" target=\"_blank\" rel=\"noreferrer noopener\">Create a Mac FileVault 2 Policy<\/a> to learn more.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>This workflow is only supported on Intel-based Macs. Apple Silicon Macs don&#8217;t support this recovery method. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/resolve-lockouts-on-apple-silicon-macs\" target=\"_blank\" rel=\"noreferrer noopener\">Resolve Lockouts on Apple Silicon Macs<\/a> to learn more.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Retrieving the Recovery Key<\/h2>\n\n\n\n<p><strong>To retrieve the recovery key from an active device:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Devices<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Under&nbsp;<strong>Devices<\/strong>, select the device that you need the recovery key for.<\/li>\n\n\n\n<li>Click the <strong>Actions<\/strong> menu and select <strong>Recovery Key<\/strong>.<br><img decoding=\"async\" width=\"1108\" height=\"877\" class=\"wp-image-108658\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg 1108w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2-300x237.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2-1024x811.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2-768x608.jpg 768w\" sizes=\"(max-width: 1108px) 100vw, 1108px\" \/><\/li>\n<\/ol>\n\n\n\n<p><strong>To retrieve the recovery key from a deleted device<\/strong>:<\/p>\n\n\n\n<p>We recommend saving the recovery key before removing a device from JumpCloud or erasing the device. However, you can retrieve the recovery key from a device that was deleted in the last 90 days using this command from the API endpoint <a href=\"https:\/\/docs.jumpcloud.com\/api\/2.0\/index.html#tag\/Systems\/operation\/systems_getFDEKey\">Get System FDE Key<\/a>. You&#8217;ll need your API key and the device&#8217;s <kbd>system_id<\/kbd>. To get your API key, see <a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-apis#accessing-your-api-key\">Accessing Your API Key<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If you don&#8217;t know the device&#8217;s <kbd>system_id<\/kbd>, you can use Directory Insights and filter the time range to when the device was deleted. In the Admin Portal, go to <strong>INSIGHTS<\/strong> &gt; <strong>Directory<\/strong> and set the <strong>Event Type<\/strong> to \u201csystem_delete\u201c. When the logs display, expand the appropriate entry and select the <strong>JSON<\/strong> tab for information from the device that was deleted.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Shell<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>curl &#8211;request GET \\<br>&#8211;url https:\/\/console.jumpcloud.com\/api\/v2\/systems\/{system_id}\/fdekey \\<br>&#8211;header &#8216;x-api-key: REPLACE_KEY_VALUE&#8217;<\/p>\n<\/div><\/div>\n\n\n\n<p><strong>PowerShell<\/strong>:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>$headers=@{}<br>$headers.Add(&#8220;x-api-key&#8221;, &#8220;REPLACE_KEY_VALUE&#8221;)<br>$response = Invoke-RestMethod -Uri &#8216;https:\/\/console.jumpcloud.com\/api\/v2\/systems\/{system_id}\/fdekey&#8217; -Method GET -Headers $headers<\/p>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Decrypting the Disk with the Recovery Key<\/h2>\n\n\n\n<p>Network connectivity doesn&#8217;t start until the disk has been decrypted.&nbsp;A hardwired network connection may be required to connect to the internet after decrypting FileVault, as Apple doesn&#8217;t provide a way to connect to a wireless network at the login screen.<br><br><strong>To decrypt the disk using the recovery key<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Start the device.<\/li>\n\n\n\n<li>Select the user.&nbsp;<\/li>\n\n\n\n<li>In the&nbsp;<strong>Enter Password<\/strong>&nbsp;field, select&nbsp;<strong>?<\/strong>&nbsp;on the right-hand side.<\/li>\n\n\n\n<li>Click&nbsp;<strong>&#8230;reset it using your Recovery Key<\/strong>.&nbsp;This will not reset your password.\u200b\u200b\u200b\u200b\u200b<br><img decoding=\"async\" width=\"956\" height=\"478\" class=\"wp-image-86719\" style=\"width: 956px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/mac_reset_using_recovery_key.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_reset_using_recovery_key.png 956w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_reset_using_recovery_key-300x150.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_reset_using_recovery_key-768x384.png 768w\" sizes=\"(max-width: 956px) 100vw, 956px\" \/><\/li>\n\n\n\n<li>Enter the recovery key.&nbsp;Hyphens are automatically applied.<br><img decoding=\"async\" width=\"957\" height=\"446\" class=\"wp-image-86720\" style=\"width: 957px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/mac_enter_recovery_key.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_enter_recovery_key.png 957w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_enter_recovery_key-300x140.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/mac_enter_recovery_key-768x358.png 768w\" sizes=\"(max-width: 957px) 100vw, 957px\" \/><\/li>\n<\/ol>\n\n\n\n<ol start=\"6\">\n<li>Press&nbsp;<strong>Enter<\/strong>.\n<ul>\n<li>The hard disk will now decrypt and network connectivity will be restored.<\/li>\n\n\n\n<li>Depending on the OS version, you&#8217;ll either be shown a <strong>password prompt<\/strong> for the user or <strong>show all active users<\/strong>. <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">User Authentication<\/h2>\n\n\n\n<p><strong>To authenticate the user<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Wait for the JumpCloud Agent to check in. This happens in near real-time, but could take a few minutes.<\/li>\n\n\n\n<li>Enter the user&#8217;s current JumpCloud password to log in.\n<ul>\n<li>If the password has changed, you&#8217;ll be prompted to enter the <strong>Old Password<\/strong> and <strong>Current Password<\/strong> to complete the sync. <\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The user is logged into their account.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>This article outlines how to use the recovery key to decrypt the macOS partition. This is helpful with account lockouts [&hellip;]<\/p>\n","protected":false},"author":202,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852,3081],"support_tag":[],"coauthors":[2836,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Recover a Password Using FileVault Recovery Key - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Recover a Password Using the FileVault Recovery Key\" \/>\n<meta property=\"og:description\" content=\"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-16T19:47:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"denasteward, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key\",\"url\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key\",\"name\":\"Recover a Password Using FileVault Recovery Key - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg\",\"datePublished\":\"2023-05-18T18:46:09+00:00\",\"dateModified\":\"2024-05-16T19:47:21+00:00\",\"description\":\"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg\",\"width\":1108,\"height\":877},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Recover a Password Using the FileVault Recovery Key\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Recover a Password Using FileVault Recovery Key - JumpCloud","description":"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key","og_locale":"en_US","og_type":"article","og_title":"Recover a Password Using the FileVault Recovery Key","og_description":"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.","og_url":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key","og_site_name":"JumpCloud","article_modified_time":"2024-05-16T19:47:21+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"denasteward, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key","url":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key","name":"Recover a Password Using FileVault Recovery Key - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg","datePublished":"2023-05-18T18:46:09+00:00","dateModified":"2024-05-16T19:47:21+00:00","description":"Learn how to use the recovery key stored in JumpCloud to decrypt macOS devices with FileVault enabled. This is helpful with account lockouts.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/device_full_page_recovery_key2.jpg","width":1108,"height":877},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/recover-a-password-using-the-filevault-recovery-key#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Recover a Password Using the FileVault Recovery Key"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75411"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/202"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75411\/revisions"}],"predecessor-version":[{"id":110434,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75411\/revisions\/110434"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75411"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75411"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75411"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}