39 lines
1.8 KiB
Markdown
Raw Normal View History

2020-06-18 10:59:51 -04:00
<!--
Title: How to protect Mac computers from cold boot attacks (also known as an evil maid attack)
Description: Learn how to protect Mac computers from cold boot attacks (also known as an evil maid attack).
Author: Sun Knudsen <https://github.com/sunknudsen>
Contributors: Sun Knudsen <https://github.com/sunknudsen>
2020-09-10 10:07:07 -04:00
Reviewers:
2020-06-18 10:59:51 -04:00
Publication date: 2020-06-05T00:00:00.000Z
-->
# How to protect Mac computers from cold boot attacks (also known as an evil maid attack)
[![How to protect Mac computers from cold boot attacks (also known as an evil maid attack) - YouTube](<how-to-protect-mac-computers-from-cold-boot-attacks-(also-known-as-an-evil-maid-attack).png>)](https://www.youtube.com/watch?v=d_M18sq0TIQ "How to protect Mac computers from cold boot attacks (also known as an evil maid attack) - YouTube")
2020-08-10 19:35:31 -04:00
### Run the following `pmset` command using the Terminal.
2020-06-18 10:59:51 -04:00
```shell
sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25 standbydelaylow 0 standbydelayhigh 0
```
2020-08-06 17:20:21 -04:00
`destroyfvkeyonstandby 1` tells macOS to destroy password (override it with random data) when computer goes to standby mode.
2020-06-18 10:59:51 -04:00
`hibernatemode 25` tells macOS to store the content of the RAM to the hard drive (which is encrypted using FileVault) and power off the RAM (which clears its data).
2020-08-06 17:20:21 -04:00
`standbydelaylow 0` tells macOS to enable standby mode immediately when battery is low and computer is put to sleep.
2020-06-18 10:59:51 -04:00
2020-08-06 17:20:21 -04:00
`standbydelayhigh 0` tells macOS to enable standby mode immediately when battery is high and computer is put to sleep.
2020-06-18 10:59:51 -04:00
See `man pmset` for more information.
---
## Want things back the way they were before following this guide? No problem!
2020-08-10 19:35:31 -04:00
### Run the following `pmset` command using the Terminal.
2020-06-18 10:59:51 -04:00
```shell
sudo pmset -a destroyfvkeyonstandby 0 hibernatemode 3 standbydelaylow 10800 standbydelayhigh 86400
```