In fact, it’s probably a good idea to use this as a chance to create a fresh set either way, just in case yours have been compromised. If you don’t already have SSH keys, then you’ll want to generate a new set. Be sure not to save the password into the OS X Keychain.

Now, you’ll be prompted for your decryption password whenever you insert the drive.

Again, using Mac OS Extended (Case-sensitive, Journaled, Encrypted).Once as OS X Extended (Journaled) using the GUID Partition Map, then.In that case, you’ll have to do a two-step dance, formatting the drive twice: However, some USB keys’ partition tables are MBR, which doesn’t support encryption, and you won’t see encrypted partitions as options in the “Format” dropdown. If you see the encrypted options in the dropdown, then just go ahead and format your drive with Mac OS Extended (Case-sensitive, Journaled, Encrypted). You’ll want to name the volume something simple (such as “keys”) to make it easier to access on the command line. Select the disk (not the volume) on the left and navigate to the “Erase” tab. Plug your drive into your computer and open Disk Utility. Once you’ve found a USB keychain drive to your liking, you’ll want to reformat it using macOS’s built-in encrypted filesystem. We prefer the Kingston DataTraveler drive due to its size and cost. This strengthens our access to Github repositories and the numerous deployments we manage.įollow these instructions to increase your security at home and work as well. Here’s how we’ve implemented two factor authentication across the board for our SSH keys using USB keychain drives. The commonly agreed upon tenets of strong security is that it requires a combination of “something you know, something you have, and something you are.” Two factor authentication includes both of those - usually something you know and something you have. Security is something you know, something you have, and something you are. Try out the “scripts-autoexpire” for a similar experience with a few extra features. UPDATE: This post’s process has been encoded and published in this repo, pivotal/usb-login-scripts.

Encrypted flash drive for mac