Help
Post your comments for How to reset a login password here
How to reset a login password
#3
MorrisTheCat 
- Member
-
- Group: Members
- Posts: 727
- Joined: 14-December 07
Posted 12 November 2012 - 08:36 AM
@zoffo, are you getting a lock icon with a password field beneath it? If so, sounds like an EFI firmware password has been set on your Mac. If you don't know what that is, and if its not something someone else may know, your only option may be to bring it into an Apple Store. My understanding is Apple techs have special tools to remove a firmware password. Its not something you can do yourself without already knowing what it is.
#4
leicaman
- Veteran
-
- Group: Members
- Posts: 2,847
- Joined: 04-December 03
Posted 12 November 2012 - 08:41 AM
Make sure to delete the old Keychain login, and have it remove the riles associated with it. Otherwise, the Keychain Access program gets way too loaded with old keychains and you have to figure out which one is the one being used.
Another point along this line is when you're in a corporate Active Directory network, make sure your Keychain password is the same as your AD password. It makes using your Mac on the network much easier, with much fewer logins required.
Another point along this line is when you're in a corporate Active Directory network, make sure your Keychain password is the same as your AD password. It makes using your Mac on the network much easier, with much fewer logins required.
Eric
Nothing in all the world is more dangerous than sincere ignorance and conscientious stupidity. - Martin Luther King, Jr.
Nothing in all the world is more dangerous than sincere ignorance and conscientious stupidity. - Martin Luther King, Jr.
#5
RhymingDesigner
- Member
-
- Group: Members
- Posts: 318
- Joined: 14-August 06
Posted 12 November 2012 - 08:55 AM
What happened to "It just works"?
#6
Chris Breen
- Advanced Member
-
- Group: Moderators
- Posts: 5,924
- Joined: 11-December 00
Posted 12 November 2012 - 08:57 AM
RhymingDesigner, on 12 November 2012 - 08:55 AM, said:
What happened to "It just works"?
This may be a security-through-obscurity measure. Given that you no longer need a physical hunk of media to boot from, you can imagine that putting a "Reset Password" command in the menubar could lead to mischief.
#7
GarryWright
- Newbie
-
- Group: New Members
- Posts: 3
- Joined: 19-March 12
Posted 12 November 2012 - 09:01 AM
I'm horrified at this. It means the passwords are not very secure at all if anyone can get in and view all my files (except only for the keychain) just by pressing cmd-r on an unattended machine!
#8
jpmhughes
- Veteran
-
- Group: Members
- Posts: 1,129
- Joined: 15-June 01
Posted 12 November 2012 - 09:18 AM
Quote
I'm horrified at this. It means the passwords are not very secure at all if anyone can get in and view all my files (except only for the keychain) just by pressing cmd-r on an unattended machine!
Don't be so horrified, just add an EFI firmware password as well.
http://support.apple.com/kb/HT1352
https://discussions....tart=0&tstart=0
#9
zoffo
- Member
-
- Group: Macworld Insiders
- Posts: 45
- Joined: 18-February 01
Posted 12 November 2012 - 09:25 AM
Quote
@zoffo, are you getting a lock icon with a password field beneath it? If so, sounds like an EFI firmware password has been set on your Mac.
Yes, I do have the firmware password enabled. I know my password, I was just testing this new method. Thanks
#10
Martian
- Veteran
-
- Group: Members
- Posts: 2,382
- Joined: 27-September 01
Posted 12 November 2012 - 10:14 AM
jpmhughes, on 12 November 2012 - 09:18 AM, said:
Quote
I'm horrified at this. It means the passwords are not very secure at all if anyone can get in and view all my files (except only for the keychain) just by pressing cmd-r on an unattended machine!
Don't be so horrified, just add an EFI firmware password as well.
http://support.apple.com/kb/HT1352
https://discussions....tart=0&tstart=0
And there is also the option keeping important files, usually just your most sensitive files, in an encrypted disk image. Specifically, a sparse bundle disk image would be the most flexible for some backup programs including Time Machine.
I suspect that unlike an encrypted disk image, firmware password protection will not protect a drive that is physically moved to a second computer. Can someone confirm this?
#12
ajhampson
- Newbie
-
- Group: New Members
- Posts: 7
- Joined: 16-December 11
Posted 12 November 2012 - 02:22 PM
Quote
I'm horrified at this. It means the passwords are not very secure at all if anyone can get in and view all my files (except only for the keychain) just by pressing cmd-r on an unattended machine!
This is a security rule from as long as we've had computer security: "There's no guaranteed security once someone has physical access to your system." Once that happens, all bets are off. That's why server access is usually strictly controlled and security specialists recommend using serious data encryption for portable device that's at risk for loss.
#13
Heart_Man_2000
- Member
-
- Group: Members
- Posts: 33
- Joined: 05-February 07
Posted 12 November 2012 - 03:26 PM
And if you can't remember your encryption password or pass phrase, well "no soup for you!"
#14
thauber
- Newbie
-
- Group: New Members
- Posts: 1
- Joined: 12-November 12
Posted 12 November 2012 - 03:28 PM
Quote
@zoffo, are you getting a lock icon with a password field beneath it? If so, sounds like an EFI firmware password has been set on your Mac. If you don't know what that is, and if its not something someone else may know, your only option may be to bring it into an Apple Store. My understanding is Apple techs have special tools to remove a firmware password. Its not something you can do yourself without already knowing what it is.
An EFI password can be reset by changing the installed RAM. Simply shut down the Mac, remove one RAM ximm and restart. Now the EFI password is disabled. Add back the memory using the above procedure and you are done
