How to protect Mac computers from cold boot attacks (also known as an evil maid attack)

How to protect Mac computers from cold boot attacks (also known as an evil maid attack) - YouTube

Run the following pmset command using the Terminal.

sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25 standbydelaylow 0 standbydelayhigh 0

destroyfvkeyonstandby 1 tells macOS to destroy password (override it with random data) when computer goes to standby mode.

hibernatemode 25 tells macOS to store the content of the RAM to the hard drive (which is encrypted using FileVault) and power off the RAM (which clears its data).

standbydelaylow 0 tells macOS to enable standby mode immediately when battery is low and computer is put to sleep.

standbydelayhigh 0 tells macOS to enable standby mode immediately when battery is high and computer is put to sleep.

See man pmset for more information.


Want things back the way they were before following this guide? No problem!

Run the following pmset command using the Terminal.

sudo pmset -a destroyfvkeyonstandby 0 hibernatemode 3 standbydelaylow 10800 standbydelayhigh 86400
Contributors:Sun KnudsenSun Knudsen
Reviewers:Be the first

Wish to contribute or need help? Read the docs.
This website is not tracking you. PGP public key fingerprint: C4FB DDC1 6A26 2672 920D  0A0F C132 3A37 7DE1 4C8B