Get a recovery key for a macOS device

Get a recovery key for your locked Mac. If you forget the password on the Mac you use for work or school and are locked out, you can sign in to the Company Portal on another device to retrieve your key.

Get recovery key from Company Portal website

This option is available for Macs that were encrypted by your organization using FileVault. It's not available for Macs that you have personally encrypted.

  1. On any device, sign in to the Company Portal website.

  2. Open the menu and go to Devices.

  3. Select the encrypted Mac.

  4. Select Get recovery key.

    Screenshot of Company Portal website, highlighting Get recovery key section.

  5. Your recovery key appears. For security reasons, the key disappears after five minutes. To see the key again, select Get recovery key.

    Screenshot of Company Portal website, showing recovery key.

If a key isn't found but your device is properly encrypted, contact your organization's support person. For contact information, check for helpdesk details on the Company Portal website.

Get recovery key from Company Portal app for iOS

Retrieve your personal recovery key (FileVault key) using the Company Portal app for iOS. This option isn't available for devices that you have personally encrypted. The personal recovery key must belong to a device that's enrolled in Microsoft Intune, and encrypted with FileVault through Microsoft Intune.

  1. Open the Intune Company Portal app.

  2. Select Get recovery key. The Company Portal website opens in Safari and shows the key.

    Screenshot of Company Portal app for iOS, showing recovery key

IT pro support

If you're an IT support person and want to configure and manage FileVault encryption, see Use device encryption with Intune.