A question about passwords on a Macbook

[TheBard]

Just got a new backbook because I'm just tired of windows based pc's.  Anyway, I was curious to know if there was a way to set this mac up to where you have to type in a password before the computer actually boots up.  I know there are ways to do this in windows (and if I remember right there was also a way to do them on the mac's I used years ago as well.)

I tried asking tech support and all they gave me was the into on setting a log in password.  I know, odd question but you won't know if you don't ask.

Thanks Y'all,
James P.

[Xairbusdriver]

First of all...Welcome Aboard, TheBard! Glad to have you join the Mac community as well as TS.

We have one very important rule here: There are no dumb questions. Only dumb answers (of which I am the chief supplier). I guess there is a sub-category called "No odd questions" also!

When you first set up a Mac, it usually assumes you are going to be the "Administrator." I'm assuming you have already done that. The second thing, that is important to your question, is that it defaults to 'automatically' log you in on start up. You may not have even seen the option to changes that when setting things up. If you have a desktop machine in a secure area (like your home) that is not a terribly bad setup. But with a laptop, it could be very bad.

Assuming you have your Mac set up and that it is automatically going from power up through its startup routines and ending up with you probably in the Finder, you can still do what the 'tech' people were suggesting. Have the Mac ask for a password or a password and a name or a few other combinations. What this means is that the Mac will not continue the start up process without those bits of information (mostly).

Open your Systems Preferences ( easiest location is in the "Apple" menu on the far left-hand of the Menu Bar, the Apple logo actually. In System Preferences, look for "Accounts" and open it. If the 'lock' icon is 'locked,' just click it and enter your password. You should now have access to the "Login Options" item. Click that item. At the top of the items on the window is an item named "Automatic login:." Your name probably is showing there.  Click on that name and you should see another choice labeled "disable." That's the one you want to prevent the Mac from being completely open to anyone who presses the power button. Below that are several options that will be available on the start up or "Login Screen." Choose whatever you want and close the System Preferences application (in this case you can just click the red button. Next time you start up, you will be greeted by a small window asking you to select from a list of users and to then enter the password.

That's it!

[chriskleeman]

Welcome theBard!

Don't mind XABD, he's usually right, and not usually as dumb as his disclaimer!

Great to have you join our little band of merry-TSer's!!!

Chris K

[krissel]

to TS!

Jim gave excellent directions for a Login password but I suspect our newest member is looking for something like the Firmware Protection Password.  The old PPC Macs had Open Firmware but the Intel Macs have EFI, nonetheless Apple included a way to provide the same protection.

QUOTE

Q. Does the shift to EFI mean that Open Firmware is gone on Intel Macs?

Yes. Open Firmware is the name for the firmware found on all PowerPC Macs. It no longer exists on Intel Macs. Holding down the Command-Option-O-F keys at startup, which brings up the Open Firmware command line interface in PowerPC Macs, does nothing on Intel Macs. This means that Open Firmware commands (such as reset-nvram, a fix occasionally recommended on MacFixIt) no longer function.

Q. But I just checked the /Applications/Utilities folder on the Mac OS X Install Disc 1 DVD that came with my Intel Mac. It still includes a utility called Open Firmware Password. What gives with that?

Indeed you are correct. This utility, on PowerPC Macs, provides a simple graphical user interface for setting an Open Firmware password. If enabled, this offers a security protection that prevents users from starting up the Mac via anything other than the internal drive — unless you supply the Open Firmware password. The utility bypasses the need to otherwise enable this option by booting into Open Firmware at startup. Given that Open Firmware no longer exists on Intel Macs, I was surprised to see this utility included on the Install DVD for my new iMac. Even more surprising, the utility had been updated to a Universal application.

But the biggest surprise was: It still works! I tested this out by enabling the password and restarting the Mac while holding down the Option key. This gets the Startup Manager screen to appear (which allows you to select a startup volume from any connected bootable drive or disc). However, before the Startup Manager appeared, a password screen popped up from which I had to enter my "Open Firmware" password before I could proceed.

Is this actually an EFI-based password? Does this mean the Open Firmware Password utility should be renamed EFI Password? I assume so, but have been so far unable to confirm this. Just one of the minor mysteries still to be resolved...and perhaps answered in a future NSFAQ.

Indeed it does work on the Intel Macs.
Here is Apple's article on how to set it up and what it will do:

http://docs.info.apple.com/article.html?artnum=106482


Note that the only way to defeat this would be to remove or alter the original RAM configuration of the MacBook and do the following:

QUOTE

After removing / adding more RAM than before, Turn on the computer and immediately reset PRAM by holding the Command-Option-P-R key combination. Press the keys until you've heard two successive startup sounds.
Open Firmware password protection should be now disabled. Shut down the computer and return it to its original RAM configuration.

[Gregg]

Bard!

To PC or not PC, that's not in question.... around here.

[Xairbusdriver]

RE: Firmware Password

Seems losing a laptop to someone who knows how to access the RAM is the most logical way to lose your data. We have the responsibility for the former and the lack of the latter should help, even if we lose the hardware somehow.

Perhaps I should try this. I suspect my cat has figured out my current log in password... OTOH, if I could include some keystrokes that required more than two keys at once...

[rob12]

Q. But I just checked the /Applications/Utilities folder on the Mac OS X Install Disc 1 DVD that came with my Intel Mac. It still includes a utility called Open Firmware Password. What gives with that?


I have searched my DVD Disc 1 and 2 and cannot find this tool anywhere.  I just bought my laptop and it does not seem to be on the Install DVDs any more. can anyone help?

[krissel]

rob12!

Here is the same info I left over at macosx.com for you.  

The application is hidden. Here are some ways to find it:

Put DVD in Mac, in Finder,
Press Command + Shift + G (Go To Folder) and type:

/Volumes/Mac OS X Upgrade DVD/Applications/Utilities

Or you could use a third party app like TinkerTool to make the application visible.

Or boot to the install disk (by restarting, holding the Option key at the startup tone and then selecting the install disk) and then running the Firmware Password Utility from the drop-down menu.

Also, this page supposedly has the application for download but I tried and got a server error. It may be working today.
http://www.macriot.com/article.php/20051111122951127

Glad you stopped by here. Hope you got my PM over there.