Downloading FileVault recovery token

Top  Previous  Next

EPB allows you to get the FileVault recovery token to decrypt the macOS disk image in Elcomsoft Forensic Disk Decryptor.

 

You can copy FileVault recovery token to clipboard or save token as XML file.

 

To download the FileVault recovery token, do the following:

 

1. On the Apple tab in the Tools menu, click FileVault.

Apple-Tools

2. On the Download FileVault recovery token from iCloud page, define the authentication type:

Password: To use your Apple credentials (Apple ID and password)

Token: To use the Authentication token extracted from iCloud using Elcomsoft Apple Token Extractor. For more information about extracting the token, see the Extracting Authentication token topic.

download_filevault

3. Click Sign in.

NOTE: If you have entered the Apple ID in a wrong format, a message about the account being locked will be displayed. Close the message and try again. Please make sure to enter your apple ID in the standard format (i.e., example@example.com). 

NOTE: If the Apple ID is protected with two-factor authentication, you need to confirm sending the verification code to all of your trusted devices or to your phone.

You can select the Save credentials for future use option when logging in so that you don't need to enter them when you log in with this Apple ID again.

4. If the Apple ID is protected with two-step verification, verify your account by selecting one of the following authentication types:

Secure Code: in the Trusted device field, select a phone number or a trusted device to which the code will be sent, click Get code, and then enter the received 4-digit code in the Secure code field.

Recovery Key: enter a 14-character key generated defined in the Apple account settings.

5. Click Verify.

download_filevault_2

6. If the Apple ID is protected with two-factor authentication, perform authentication in one of the following ways:

Select Trusted Device and enter the 6-digit code in the Verification code field. Click Resend code for the verification code to be sent to all trusted devices.

Select Text message and enter the 6-digit code in the Verification code field. Click Send code for the verification code to be sent as a text message to the selected trusted phone number. Click Resend code for it to be sent again.

NOTE: macOS 10.12 or higher is required for sending text messages.

NOTE: Authentication via the Text message is available for the Forensic edition only.

Select Code generator and enter the 6-digit code in the Verification code field. The code is generated on the trusted device or via Cloud Panel.

2fa_filevault

7. Click Verify.

8. The process of downloading the recovery token begins. The progress is displayed in the program window. To stop the downloading process, click Stop.

recov_token_downloading

9. When downloading is finished, you can do the following:

Click Copy to Clipboard to copy the downloaded FileVault recovery token.

Click See log to open the journal and view the start time and end time of downloading and the errors that occurred during downloading.

Click Save Token to save downloaded token to XML file. In the opened window, select the location to which the file must be saved and click Save.

Click Finish to exit the downloading wizard.

Click Change user to download FileVault recovery token for a different Apple ID.

Click All tools to return to the list of tools for working with Apple backups.

recovery_token2

 

 


 Get more information about Elcomsoft Phone Breaker
 Get full version of Elcomsoft Phone Breaker (Windows)
 Get full version of Elcomsoft Phone Breaker (Mac)

 © 2019 ElcomSoft Co.Ltd.