How to set and turn off firmware password on Mac

5 min read

Need to know how to turn off a firmware password on Mac? If you've enabled this security feature but now need to turn it off, or you've changed your mind about using it, you're in the right place.

In this guide, we'll explain exactly what a firmware password is, how to set it up, and most importantly, how to turn it off, so let's get this article started.

What is a firmware password?

A Mac firmware password is a security feature on Macs with an Intel processor that essentially locks access to startup settings and prevents your Mac from booting from external drives.

Macs with Apple silicon don't have a firmware password. To protect the data on them, Apple recommends turning on FileVault instead.

You might be wondering why on earth you would need this security feature, but it's important, and it helps protect against unauthorized changes or access, especially if your Mac is lost or stolen.

Unlike your regular login password, which protects your user account, the firmware password operates at a much deeper level, preventing system modifications before your macOS even loads up.

Still baffled as to why you'd need to use a Firmware password? Let's break it down:

  • Extra security: Prevents unauthorized users from bypassing your macOS password using recovery tools.

  • Prevents unauthorized booting: Blocks access to recovery mode, recovery over the internet, and external boot drives.

  • A must-have for businesses and schools: IT admins use it to prevent tampering on shared or public Macs.

While it enhances security, it's important to mention that forgetting your Mac firmware password can be a hassle; you'll find yourself stuck and locked out of your Mac.

firmware password on Mac

Talking about forgetting passwords and getting stuck, if you're having login issues and seem to be stuck on the startup screen, check out this article: MacBook stuck on the loading screen.

How to set up a firmware password on Mac

If you've decided you want to add extra protection to your MacBook, then setting a firmware password is actually quite straightforward; let's take a look:

Step 1: Boot into recovery mode

Turn off your Mac completely from the main Apple menu. Then turn it on and immediately press and hold Command-R until the familiar Apple logo appears.

Step 2: Enable Firmware Password

  1. In the macOS Utilities window, click Utilities in the top menu bar.

  2. Choose Startup Security Utility or Firmware Password Utility (the name depends on your Mac: Startup Security Utility on Macs with the Apple T2 Security Chip, Firmware Password Utility on older Intel-based Macs).

  3. Enter your admin password if requested.

  4. Click Turn On Firmware Password, and here you can create a strong password.

  5. Now, click Set Password and restart your Mac.

Enable Firmware Password

Now, your Mac is protected, and no one can boot from external drives or access recovery mode without entering the firmware password you just set.

Pro tip: If you store sensitive documents on your Mac, turn on FileVault first: it encrypts your whole disk. For individual files you want to keep extra safe, put them in an encrypted disk image: in Disk Utility, choose File > New Image > Image from Folder and pick 256-bit AES encryption. A password-protected ZIP made with Terminal's zip command uses older, weaker encryption, so don't rely on it for sensitive data.

How to turn off firmware password on Mac

If you decide you no longer need this extra security feature from Apple, follow these steps to turn off firmware password on your Mac.

Step 1: Boot into recovery mode

  • Boot back into recovery mode; you can use the steps we mentioned above.

Step 2: Disable the Firmware Password

  • Once again, in the macOS Utilities window, open Startup Security Utility or Firmware Password Utility.
  • Click Turn Off Firmware Password and enter your current password.
  • Click Disable Firmware Password.
  • Finally, restart your MacBook.

Forgot your firmware password? If you don't remember your firmware password, you'll need to make an appointment and visit an Apple Store or authorized repair center with proof of ownership to reset it.

Keep your MacBook running smoothly

While securing your Mac is essential, performance and optimization are just as important. A great way to ensure your Mac stays fast and efficient is by using CleanMyMac and its Smart Care tool.

Why use Smart Care?

  • Frees up storage: Cleans unnecessary files, caches, and duplicates.

  • Optimizes performance: Helps speed up your Mac by removing background processes that slow it down.

  • Keeps your system healthy: Monitors your Mac's health and alerts you to potential issues before they become serious.

CleanMyMac - Smart Scan complete

Here's how to get started:

  1. Get your free CleanMyMac trial.

  2. Open the application and click Smart Care > Scan.

  3. Choose any tasks or items and click Run.

Maintaining your Mac regularly will help prevent system issues and keep your Mac running at peak efficiency.

So we've covered everything, including how to turn off a firmware password on a Mac, what one is, and how to set one up. As a final reminder, it's important to remember your password if you do decide to enable it — otherwise, you may find yourself locked out of certain Mac functions.

Frequently asked questions about Mac firmware passwords

What is the default firmware password on Mac?

We've seen this one and asked a lot, but there is no default firmware password. A user needs to set firmware passwords manually.

Is a firmware password the same as an EFI password?

Yes. Since 2006, Intel-based Macs have used firmware based on the Extensible Firmware Interface (EFI), so the firmware password is also called an EFI password. It’s the same password you turn on and off with the steps in this article.

Should I enable a firmware password on my Mac?

This is down to you and your needs. For an Intel-based Mac, it is an extra layer of protection (in addition to FileVault). Firmware password is most useful for a shared Mac or a Mac that could be stolen. Important: only set a firmware password if you are sure you'll remember it because if you forget it, you'll need to take your Mac to Apple with proof of ownership.

How do I set Secure Boot to Full Security on a Mac?

Full Security is already the default on Macs with Apple silicon and on Intel-based Macs with the Apple T2 Security Chip, so you only need to change it if the setting was lowered. On a Mac with the T2 chip, start up from macOS Recovery, choose Utilities > Startup Security Utility, authenticate with an administrator account, and select Full Security under Secure Boot. On a Mac with Apple silicon, start up from macOS Recovery, choose Utilities > Startup Security Utility, select your startup disk, click Security Policy, choose Full Security, and then enter an administrator password and restart your Mac.