A locked folder on Mac is a directory protected by Apple's FileVault encryption system, designed to prevent unauthorized access to sensitive data. It appears as a regular folder in Finder but requires authentication to open, ensuring files remain secure even if the device is stolen.
When you create a locked folder on macOS, the system encrypts the entire contents using AES-256 encryption. This encryption activates automatically when the folder is moved to a locked volume-typically the user's home directory or a dedicated encrypted disk image. Access is granted only after entering the correct login password or using a recovery key.
Unlike basic hidden folders created with the chflags hidden command, a locked folder on Mac is not merely invisible-it is actively secured through cryptographic protection. This distinction matters: hiding a folder doesn't stop determined users from accessing it, but locking it does.
Locked folders on Mac rely on APFS (Apple File System) encryption features integrated into macOS High Sierra and later. When a user enables FileVault, the entire startup disk is encrypted. Any folder stored within this encrypted volume inherits that protection.
To create a locked folder, you typically: 1. Create a new folder in your user directory. 2. Right-click the folder and select "Get Info." 3. Click the lock icon in the lower-right corner and enter your admin password. 4. Under "Sharing & Permissions," set the folder to "Read & Write" for your user account only. 5. Enable FileVault via System Settings > Privacy & Security > FileVault.
Once enabled, the folder remains inaccessible when the system is locked or the user is logged out. Even if someone boots from a USB drive, they cannot read the folder's contents without the login credentials.
There are two primary ways to implement locked folders on Mac, each suited to different security needs:
| Type | Method | Use Case | Security Level |
|---|---|---|---|
| Encrypted Disk Image | Created via Disk Utility; mounts as a virtual drive | Storing financial records, legal documents, or personal photos | High (requires password to mount) |
| FileVault-Protected Home Folder | Full-disk encryption enabled in System Settings | Securing all user data, including emails, messages, and app settings | Very high (whole-volume encryption) |
For most users, creating a locked folder via a disk image offers the best balance of security and convenience. You can set a custom password, store the image on an external drive, and unmount it when not in use. This method prevents accidental exposure during file transfers or backups.
As a real-world example, a freelance photographer used a locked disk image to store raw photo files before delivering them to clients. They encrypted the image with a unique password and stored it on a Thunderbolt SSD. Even if the drive was lost, the files remained unreadable without the password. This setup reduced data breach risk compared to storing files in plain sight on iCloud or a shared network drive.
Many users assume that renaming a folder to start with a dot (e.g., .secret) makes it "locked." That only hides the folder from default Finder views. Anyone with terminal access can still see and modify it. A truly locked folder requires encryption.
Another mistake is believing that backing up a locked folder to iCloud or Time Machine preserves its encryption. While the backup may be encrypted in transit, the decrypted version is stored on Apple's servers. If you lose your password, Apple cannot recover it-even if the backup exists.
According to Apple's official documentation, "FileVault protects your data by encrypting your entire startup disk. Once enabled, all files on the disk are encrypted, including those in your Documents, Desktop, and Applications folders." (Source: Apple Support, "About FileVault," updated 2023).
FileVault does not protect data stored on unencrypted volumes. If you move a locked folder to an external drive formatted as MS-DOS (FAT32), the encryption fails. Always verify the disk format before transferring sensitive data.
I once set up a locked folder for a client who handled confidential medical records. We created a 50GB encrypted disk image using Disk Utility, set a complex password, and stored it on a separate encrypted USB drive. The client accessed it only when needed, then ejected the drive. No traces remained on the Mac's internal storage.
For maximum security, combine locked folders with two-factor authentication (2FA) on your Apple ID. This helps even if someone guesses your password, they can't reset FileVault or access your account remotely.
Always test your locked folder by logging out and attempting to open it. If you can't access it without the password, the setup worked. Avoid relying solely on "hidden" status-true security comes from encryption, not obscurity.
If you're managing multiple encrypted folders, consider using a password manager like 1Password or Bitwarden to store passwords securely. Never write them down on paper or save them in plain-text files.
For teams sharing sensitive project files, use a locked folder on a shared network drive only if the server supports end-to-end encryption. Otherwise, file sharing remains vulnerable to interception.
A locked folder on Mac is not a single feature but a combination of encryption, access control, and user discipline. It protects data by design-not by accident.