How to protect Mac computers from cold boot attacks (also known as an evil maid attack)

How to protect Mac computers from cold boot attacks (also known as an evil maid attack) - YouTube

Run the following pmset command using the Terminal.

sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25 standbydelaylow 0 standbydelayhigh 0

destroyfvkeyonstandby 1 tells macOS to destroy your password (override it with random data) when your computer goes to standby mode.

hibernatemode 25 tells macOS to store the content of the RAM to the hard drive (which is encrypted using FileVault) and power off the RAM (which clears its data).

standbydelaylow 0 tells macOS to enable standby mode immediately when your battery is low and you put your computer to sleep.

standbydelayhigh 0 tells macOS to enable standby mode immediately when your battery is high and you put your computer to sleep.

See man pmset for more information.


Want things back the way they were before following this guide? No problem!

Run the following pmset command using the Terminal.

sudo pmset -a destroyfvkeyonstandby 0 hibernatemode 3 standbydelaylow 10800 standbydelayhigh 86400
Contributors:Sun KnudsenSun Knudsen

Wish to contribute? Please submit an issue or a pull request.
This website is not tracking you. PGP public key fingerprint: C4FB DDC1 6A26 2672 920D  0A0F C132 3A37 7DE1 4C8B