>

Check or Set a Firmware Password with firmwarepasswd

Use firmwarepasswd to verify whether an Open Firmware password protects your Intel Mac from booting other disks.

macOSbootsecurityfirmwarepasswdHigh risk
Run sudo firmwarepasswd -check to see if a firmware password is set; add one with sudo firmwarepasswd -setpasswd -setmode command.

01Command

Command
$ sudo firmwarepasswd -check && sudo firmwarepasswd -setpasswd -setmode command

02What it does

A firmware password is checked by the Mac's boot ROM before macOS loads: with mode 'command', anyone trying to boot from another volume, recovery, or an installer must enter the password first. firmwarepasswd is the command-line tool for checking (-check), setting (-setpasswd with -setmode command), and removing (-delete) this protection. On Intel Macs it is the strongest anti-theft measure short of FileVault; Apple silicon Macs instead tie this protection to Activation Lock.

03Risk

RiskHigh risk
RequirementsRequires administrator (sudo) privileges; Intel Macs only — Apple silicon Macs use Activation Lock instead.
!Warning: If you forget a firmware password, an Apple Store or authorised service provider must verify ownership to clear it — there is no bypass. Apple silicon Macs do not support firmwarepasswd at all; check Activation Lock status instead.

04Undo

Undo
$ sudo firmwarepasswd -delete

05Sources

  • firmwarepasswd(8) macOS man page
    unix.com · technical · 2026-09-17
    Evidence: Man page for firmwarepasswd with -check, -setpasswd, -setmode and -delete options for the Open Firmware password.
  • How to set a firmware password on your Mac
    Apple · vendor-doc · 2026-09-17
    Evidence: Apple's guide explaining that a firmware password prevents starting up from other disks and how to set or remove it.

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Create an Encrypted Disk Image with hdiutil
macOShdiutilsecuritydisk-image

Build an AES-256 encrypted .dmg vault from the Terminal — no Disk Utility clicking required.

Low risk ✓ 2026-09-17
Verify an App's Code Signature with codesign
macOSGatekeepersignaturecodesign

Check whether an application bundle was signed properly and hasn't been modified since.

Low risk ✓ 2026-09-17
Read and Clear NVRAM Firmware Variables
macOSnvramrecoveryboot

Inspect boot-args and other firmware settings stored in non-volatile RAM from the Terminal.

Low risk ✓ 2026-09-17