Ask HN: How to keep the information on your Macbook safe

#1 Always ensure you have a password set on your computer. Whether first booting up or coming back from sleep, it should ask for a password. If they are going to steal your laptop, at least make them have to do some work of having to wipe your data.

#2 Glue all electronics to your hip. I don't care where you are or what you have to do. Get a backpack for all of your electronics and never let it out of your sight.

#3 I believe Apple was the first to do it with iPhone, might be available for Macbook, but if password is wrong 10 times, all data is wiped from phone, though I believe password is left intact.

1) Make sure your harddrive is encrypted using Filevault (It's actually firevault 2). Make sure that you require a password to login and that if you're away from your computer for 5 minutes that you need to login with a password. I believe that Mac's have a find your laptop/remote wipe your laptop.

If you're working for a company suggest setting up a MDM management system like Jamf or Fleetsmith (GSuite may also support macs, but I'm not sure). These will allow you to automate setups including the forcing of encryption. Jamf at least has the remote wipe ability built in.

Also make sure that any media you use for backing up your MacBook is also secure. And use encrypted backups of course.

Would not have helped in your situation, but at home I have a locking file cabinet, and I put everything in there and lock them up when I leave the house.

If you store source code on your personal laptop[1] you have to enable encryption. That should be like 'security 101'. Especially if you go to tech conferences where people who might steal your laptop actually know what the "~/.aws/config" is and what "~/Work/<company-source>" might worth. I would be very skeptical of ppl running around with laptops containing proprietary source code without encryption on.

If you own a mac:

  * Enable FileVault
  * Enable 'require password immediately'
  * Choose a password with 8 or more chars
  * Never leave the keyboard unattended

You can lock your mac with: "open -a ScreenSaverEngine" or even better:

echo 'alias klock="open -a ScreenSaverEngine"' >> ~/.profile'

[1] If this is a work laptop then the company should have some kind of security policy and encrypting everything is where everyone would/should begin.