I've spent the last four hours trying to reset the login password on my 2019 Intel MacBook Air, but every password variation I try is rejected as incorrect. I also tried using my Apple ID through the reset options, but macOS says that the supplied iCloud account could not unlock the volume. The Mac is signed in to that same Apple ID, and I can complete the six-digit verification code. What options do I have to regain access without losing my files?
2 Answers
If FileVault encryption was enabled, resetting the password requires either an authorized user account, a recovery key, or an Apple ID that was specifically enabled to unlock the disk. When FileVault was configured, macOS offered the option to save a recovery key with the Apple ID; if that was skipped, the key would only work if it was saved separately. Without one of those authorized unlock methods, the volume can’t be opened and erasing the Mac may be the only way forward.
That message usually means the Apple ID isn’t authorized to unlock the encrypted startup volume, even if it’s the account currently signed in to macOS. Apple ID verification by itself doesn’t guarantee that it can reset the local login password. Start in macOS Recovery and check which password-reset options are available there. If none work, the remaining supported option may be erasing the Mac and reinstalling macOS, which will remove the data on the internal drive.
The Mac is logged in to the same Apple ID I’m entering, and I can successfully receive and enter the six-digit verification code. Does that still mean the account may not have permission to unlock the volume?