How To Encrypt A Flash Drive On Mac | Two Methods That Work

Encrypting a flash drive on Mac requires Disk Utility’s erase to APFS (Encrypted) or Finder’s on-the-fly encryption for drives already on APFS.

The safest way to learn how to encrypt a flash drive on Mac is to use Disk Utility — the free tool already sitting in your Applications folder. It reformats the drive with a password, which wipes everything clean, so backing up comes first. If the drive already uses Apple’s modern APFS format, you can skip the erase and add encryption through Finder instead.

Both methods use strong AES-128 or AES-256 encryption built into macOS, and neither requires third-party software. The one you pick depends entirely on your drive’s current format and whether you can back up the data on it before starting.

Encrypting a Flash Drive on Mac: Which Method Fits Your Situation

MacOS gives you two distinct routes for encrypting a flash drive. One works on any drive regardless of its current file system but requires erasing it completely first. The other lets you add a password without deleting any files, but only works if the drive is already formatted as APFS — the default file system for drives used exclusively with modern Macs.

If the drive is empty or you can back it up, use Disk Utility’s erase method. If it’s already APFS and you can’t erase it, use Finder’s on-the-fly encryption. If you need the drive to work on both Mac and Windows, skip both and use VeraCrypt instead.

Method One — Erase and Reformat (Works with Any Drive)

This is the universal approach. It works on every flash drive regardless of its current format, but it permanently deletes everything on the drive. Back up any files you want to keep before starting.

The process uses Disk Utility, located in Applications > Utilities. Follow these steps:

1. Open Disk Utility (Spotlight search for “Disk Utility” is the fastest way).
2. In the menu bar, click View > Show All Devices. Without this, you won’t see the physical drive.
3. Select the parent device in the sidebar — the physical drive name, not the indented volume below it.
4. Click Erase in the toolbar.
5. In the Scheme dropdown, choose GUID Partition Map. The encrypted format options won’t appear without this.
6. In the Format dropdown, choose APFS (Encrypted). Mac OS Extended (Journaled, Encrypted) is also available for older Macs.
7. Enter a password twice and optionally add a password hint. Make this password strong and memorable — there is no recovery key for Disk Utility-encrypted drives. If you forget it, the data is gone permanently.
8. Click Choose, then click Erase to begin reformatting and encrypting.
9. When the process finishes, click Done.

The drive now appears in Finder with a small lock icon. Every time you connect it to the Mac, macOS prompts you for the password before mounting it.

Apple’s official documentation on encrypting storage devices with Disk Utility confirms that GUID Partition Map is required for encrypted format options to appear.

Can You Encrypt Without Losing Data?

Yes — if the flash drive is already formatted as APFS. MacOS includes an on-the-fly encryption option in Finder that lets you password-protect the drive without erasing it. This is the best route when you forgot to encrypt the drive before filling it with files and don’t have the time or space to back them up.

The process takes just a few steps:

1. Open Finder and locate the flash drive in the sidebar.
2. Control-click (or right-click) the drive and select Encrypt [Drive Name] from the menu.
3. Enter a password twice and add a hint if you want. The same warning applies — no recovery key exists, so do not lose this password.
4. Click Encrypt Disk and wait. The time depends on how much data is on the drive — a few minutes for a typical flash drive, longer if it’s nearly full.

When it’s done, the drive shows a lock icon in Finder. macOS asks for the password each time the drive is connected. You can optionally save the password to your Keychain so the Mac auto-unlocks it, but that bypasses protection on that specific computer.

This option may not appear on every macOS version. Users on macOS Sonoma 14.5 have reported the Encrypt option missing depending on the drive’s specific formatting. If you don’t see it, use the Disk Utility method instead.

Does FileVault Encrypt External Drives?

No. FileVault only encrypts the internal boot drive — the hard drive or SSD inside your Mac. It has no effect on external flash drives, USB SSDs, or any other removable storage. Use Disk Utility or Finder’s on-the-fly encryption for external drives.

VeraCrypt — When You Need Cross-Platform Encryption

APFS (Encrypted) only works on Macs. Plug an APFS-encrypted drive into a Windows PC or Linux machine and it won’t be recognized at all. For cross-platform encryption, VeraCrypt is the recommended free tool. It creates an encrypted container on any formatted drive — exFAT, FAT32, or NTFS — that opens with the same password on macOS, Windows, and Linux. The trade-off is that it uses a software container rather than encrypting the entire drive natively, so you mount the container as a separate volume each time.

Common Encryption Mistakes

Even experienced Mac users hit these snags. Knowing them beforehand saves frustration and protects your data.

Choosing the Right Encryption Method

The decision comes down to three questions. Can the drive be erased? If yes, use Disk Utility with APFS (Encrypted) — it’s the most reliable and future-proof route. If the drive can’t be erased and is already APFS, use Finder’s on-the-fly encryption