Start with these three steps
Read the exact prompt
Record whether it requests a user password, FileVault key, Apple Account or Activation Lock information. These screens are not interchangeable.
Locate existing recovery material
Look for the Mac’s own recovery-key record and check with your organisation’s IT team if it managed the laptop.
Stop before an erase
If a reset workflow reaches Erase Mac, pause. That restores use of the hardware by removing data; it does not recover your files.
Match the credential to the request
The ordinary Mac login uses the password for a local user account. Apple identifies a FileVault recovery key as a separate 24-character code, distinct from an Apple Account recovery key. Read the label carefully before deciding that a credential has failed.
Check the selected user and keyboard layout. If the built-in keyboard was damaged, that can complicate entry even when you remember the correct password. Keep the original recovery-key record intact and use a trusted input method; avoid circulating passwords or screenshots of keys in an initial service enquiry.
Sources: [1] Apple Support
Use only the recovery route offered for this Mac
Apple provides login and Recovery options whose availability depends on the Mac’s setup. An Apple Account may help when the relevant recovery option was configured, but online account recovery alone is not a universal FileVault unlock. Follow the prompts for the existing installation and retain the data-preservation objective.
For a Mac using macOS Tahoe 26 or later, its FileVault key may be available in Passwords on another trusted device using the same Apple Account and iCloud Passwords & Keychain. Look for the record matching this MacBook. The key’s presence is conditional, so do not assume it was synchronised.
Sources: [1] Apple Support [2] Apple Support [3] Apple Support
Ask the organisation about an escrowed key
A business or school may have stored the Mac’s personal recovery key through device management. Contact the authorised IT team with the device identifier and ownership context. Ask them to check the actual key record and approved recovery process before anyone resets or retires the computer.
Do not assume an old institutional master key works on every generation. Apple recommends personal recovery keys for modern FileVault management and documents limitations of institutional keys on Apple silicon. The useful evidence is a valid key or supported access route for this specific device.
Sources: [4] Apple Platform Deployment [5] Apple Platform Security
Separate a locked volume from damaged storage
A valid credential helps unlock a viable encrypted volume; it does not repair unreadable storage. If the MacBook also suffered a spill, board failure or SSD fault, the hardware problem must be considered alongside authentication. Describe both issues when requesting an assessment.
For Apple silicon and T2 internal storage, encryption depends on the original hardware as well as the applicable keys. Changing a password cannot recreate erased cryptographic material. Inspect independent backups and cloud copies before accepting an erase. Remember that an encrypted Time Machine backup has its own password requirements.
Sources: [6] Apple Platform Deployment [7] Apple Platform Security [8] Apple Support
A realistic view of recovery
- Proof of ownership does not itself supply the cryptographic keys needed to decrypt a FileVault volume.
- If all applicable unlock options are unavailable, a recovery provider cannot promise to bypass FileVault.
Your questions, answered
Is my Apple Account recovery key the FileVault key?
Will resetting the Mac login always recover access?
Does my Time Machine password have to match?
Need help with the original MacBook?
Describe the model, what happened and which data matters. Data Recovery Lab NZ is an external specialist; ask it to confirm the assessment route for your exact device.
Sources & further reading
Primary and specialist guidance checked 27 October 2026. Features and instructions depend on the model and operating system.