Guide

How to protect sensitive documents on a shared Mac

Use layers. No single setting covers every way another person or program might gain access.

Set up protection in layers

  1. Give each person a separate standard account instead of sharing an administrator login.
  2. Require a password after sleep or the screen saver and enable FileVault for startup-disk protection.
  3. Place selected private records in a separate encrypted vault.
  4. Close files and relock the vault whenever you finish using them.
  5. Back up the locked sparsebundle and periodically test the copy.

Control physical and software access

Install trusted software, keep macOS updated, review login items, and lock the screen whenever you step away. An unlocked vault cannot protect against someone controlling your active session.

Back up responsibly

Back up the locked sparsebundle rather than an open mount. Keep recovery details separate from the backup, and periodically test that the copy opens.

Limits on a shared Mac

An unlocked vault cannot protect against another person or program controlling the active account. Lock My Folders does not replace account separation, FileVault, software updates, malware protection, or backups, and it cannot recover forgotten passphrases.

View Lock My Folders on the Mac App Store