
Low-level passwords are quite secure, which also means there is potentially a headache if the password is forgotten. It's a separate password that appears immediately after boot and must be entered into the system lock screen, which appears as a lock symbol on either a black or a gray background. After entering the passcode the Mac starts up from the designated startup disk and disables the passcode.Ī firmware password is not the same as the administrator password or login password. The user's Mac receives the lock instruction from iCloud, restarts, and asks for the system lock PIN code that they set up. The Lost Mode feature of Find My Mac will remotely lock the Mac with a firmware password for one-time use.

This command (Option + Command + P + R), however, will initiate the machine from macOS Recovery instead. That's known as the firmware password or EFI (Extensible Firmware Interface) lock, which will also block the user's ability to use all startup key combinations, except the NVRAM or PRAM reset combinations.

MacOS provides multiple methods to protect the data on a Mac: a user account password, encryption via FileVault, and optional low-level security measure that prevents starting up from storage devices other than the selected startup disk.
