# FileVault2 encrypted for Mac

**URL:** <https://sleuthkit.discourse.group/t/filevault2-encrypted-for-mac/2096>\
**Category:** Autopsy Help\
**Created:** [August 17, 2020, 3:22pm UTC](https://sleuthkit.discourse.group/t/filevault2-encrypted-for-mac/2096 "2020-08-17T15:22:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gh05t](https://avatars.discourse-cdn.com/v4/letter/g/51bf81/32.png) [@Gh05t](https://sleuthkit.discourse.group/u/Gh05t)\
**Post date:** [August 17, 2020, 3:22pm UTC](https://sleuthkit.discourse.group/t/filevault2-encrypted-for-mac/2096/1 "2020-08-17T15:22:31Z")

</div>

Good day

I have a .eo1 image of the suspects drive, it work with _FileVault2 encrypted_ for Mac

This use the logon credentials of the user to decrypt the drive

I have the password (logon credentials).

FTK and EnCase ask the password before opening op the image

Where in autopsy do I put in the password

How do I open the drive for Autopsy to do the Ingest.

Thank you

---

<div class="post-metadata">

**Author:** ![apriestman](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/apriestman/32/24_2.png) [@apriestman](https://sleuthkit.discourse.group/u/apriestman)\
**Post date:** [August 17, 2020, 5:20pm UTC](https://sleuthkit.discourse.group/t/filevault2-encrypted-for-mac/2096/2 "2020-08-17T17:20:52Z")

</div>

Autopsy does not currently support encrypted images.

---

<div class="post-metadata">

**Author:** ![John\_Lehr](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/john_lehr/32/45_2.png) [@John\_Lehr](https://sleuthkit.discourse.group/u/John_Lehr)\
**Post date:** [October 24, 2020, 4:45pm UTC](https://sleuthkit.discourse.group/t/filevault2-encrypted-for-mac/2096/3 "2020-10-24T16:45:49Z")

</div>

If you want to use Autopsy for the analysis, you would need to image the decrypted volume.