To decrypt and recover the user's FileVault-encrypted Mac:
For a volume formatted as APFS on macOS Mojave 10.14 and higher
-
Show the disk volumes on the Mac. Run this command.
diskutil apfs list
The volume to recover is the OS Volume. It has a name similar to disk2s1.
-
Run this command.
diskutil apfs unlockVolume <Diskname> -passphrase <personal recovery key>
The volume is now unlocked.
-
Get the list of apfs cryptousers. Run:
diskutil apfs listcryptousers <Diskname>
For example:
diskutil apfs listcryptousers disk2s1
For a local user, select the UUID of the user that has Type: Local Open Directory User
-
Decrypt the volume. Run:
diskutil apfs decryptVolume <diskname> -user <user UUID>
-
Enter the password of the local user
-
To monitor the progress of the decryption, run:
