Disk Macintosh HD Can’t Be Unlocked? Fixes

If your Mac shows “Disk Macintosh HD can’t be unlocked” during startup or in Disk Utility, it usually means FileVault encryption is blocking access because the correct password or recovery key isn’t being accepted. The fix involves resetting the password through macOS Recovery, checking the keychain, or using the recovery key — and in most cases you won’t lose your data. Below are the exact steps, the reasons this happens, and what to do when the standard fixes don’t work.

Why Does This Happen?

FileVault encrypts your entire startup disk. When you turn on the Mac, the firmware asks for the password of a user account that is allowed to unlock the disk. If that password is forgotten, mistyped, or the account’s password was changed outside of the normal process, the disk stays locked. Other triggers include:

• A recent macOS update that changed how the login window handles encrypted volumes.
• An external drive that is encrypted but not recognized as a startup volume.
• Corrupted NVRAM (non-volatile random-access memory) storing the wrong unlock state.
• Attempting to access the disk from a different Mac without the correct credentials.

The error is most common on Intel Macs, but Apple Silicon Macs can show a similar message when the volume is locked and the password prompt is dismissed too quickly.

Before You Panic: What Not to Do

Do not erase the disk or reinstall macOS until you have exhausted password recovery options. Erasing destroys the encryption keys, making data unrecoverable. Also avoid guessing passwords repeatedly — after too many failures, the Mac may become unresponsive for a set period or require a recovery key. Write down any password you try, and keep the Mac plugged in during recovery attempts.

Fix 1: Reset the Password via macOS Recovery

This is the first thing to try. It works if you have an administrator account whose password you know, or if you can answer Apple ID security questions.

1. Shut down the Mac.
2. Turn it on and immediately press and hold Command (⌘) + R on an Intel Mac, or press and hold the power button on Apple Silicon until you see “Loading startup options.”
3. Open Terminal from the Utilities menu.
4. Type resetpassword and press Return.
5. Follow the on-screen prompts to reset the password for the account that owns the disk.
6. Restart and try unlocking with the new password.

If you don’t know any admin password, you may be asked for your Apple ID. That only works if you set up password reset via Apple ID when FileVault was enabled.

Fix 2: Use the FileVault Recovery Key

When you first enabled FileVault, macOS gave you a 24-character recovery key. If you saved it, this is the most direct unlock method.

1. At the login window, click the question mark or the “unlock” button.
2. Choose “Use recovery key” instead of a password.
3. Type the key exactly as written — it is case-sensitive and includes hyphens.

If you never saved the key, check if your iCloud account has it: on another device, go to iCloud.com → Account Settings → Security → Recovery Key. If it’s not there, you’ll need to rely on password reset or, as a last resort, data recovery services.

Fix 3: Check the Keychain and Login Items

Sometimes the disk is unlocked but the login process fails because the user’s keychain is corrupted. This shows as a pop-up asking to unlock “login keychain” right after you enter the password.

• Type the same password you use to log in — that usually unlocks the keychain.
• If it doesn’t, click “Update Password” in the pop-up to sync the keychain with the new login password.
• If the keychain is beyond repair, delete it from ~/Library/Keychains/ — you’ll lose saved passwords but the disk will unlock.

This fix is more about the login experience than the disk itself, but it’s a common source of confusion.

Fix 4: Reset NVRAM and Try a Different User

On Intel Macs, resetting NVRAM can clear a stuck unlock state.

1. Shut down.
2. Turn on and immediately press and hold Option + Command + P + R for about 20 seconds.
3. Release and let it boot normally.

If you have multiple user accounts, try logging in with a different admin account. If that works, the issue is specific to the first account’s password, not the disk encryption.

When All Else Fails: Data Recovery and Erase

If no password or key works and you have no backup, the only remaining option is professional data recovery. That can be expensive and isn’t guaranteed. If you decide to erase, you’ll lose everything, but the Mac will work again.

1. Boot to macOS Recovery.
2. Open Disk Utility.
3. Select “Macintosh HD” and click Erase.
4. Choose APFS (or Mac OS Extended if you’re on an older system) and erase.
5. Reinstall macOS from the recovery window.

Before erasing, double-check that you don’t have a Time Machine backup or an iCloud backup that contains your files.

Frequently Asked Questions

Will I lose my files if I reset the password?

No, resetting the password through Recovery does not erase the disk. It only changes the login credentials for the user account. Your files remain encrypted but accessible with the new password.

What is the FileVault recovery key and where do I find it?

It’s a 24-character code generated when you turn on FileVault. You can find it in System Settings → Privacy & Security → FileVault, if you’re logged in. If you’re not logged in, check iCloud.com under Security → Recovery Key.

Why does it say “unlock” even after I enter the correct password?

This usually means the password is correct but the disk’s encryption state is out of sync. Try resetting NVRAM, then restarting. If that fails, use the recovery key.

Can I unlock the disk from another Mac?

Yes, if you connect the disk as an external drive and know the password or recovery key. Open Disk Utility, select the volume, and click “Unlock” — then enter the credentials.

Does this happen on Apple Silicon Macs?

Yes, but the recovery process is slightly different — you hold the power button to enter Startup Options. The password reset tool is the same.

Is there a way to bypass FileVault without a password?

No. FileVault is designed to be unbreakable without the password or recovery key. The only exception is if you have a firmware password set, which can be removed by Apple with proof of purchase, but that still doesn’t unlock the encrypted disk.

Related

• Identify Fonts on a Webpage: 5 Quick Ways
• Squadron 42: What to Know Before You Play
• Reverse Text String: How to Do It & Why