The Lost Mode feature of Find My Mac will remotely lock the Mac with a firmware password for one-time use. The user's Mac receives the lock instruction from iCloud, restarts, and asks for the system lock PIN code that they set up. After entering the passcode the Mac starts up from the designated startup disk and disables the passcode. Show  A firmware password is not the same as the administrator password or login password. It's a separate password that appears immediately after boot and must be entered into the system lock screen, which appears as a lock symbol on either a black or a gray background. Firmware Passcode SecurityLow-level passwords are quite secure, which also means there is potentially a headache if the password is forgotten. If you or any of your users can't remember the firmware password or passcode, know that Apple doesn’t allow for any workarounds, but instead recommends scheduling a service appointment with an Apple Store or Apple Authorized Service Provider. The process requires the original receipt or invoice as proof of purchase. Earlier versions of macOS required manual installation of the firmware but, starting in 2015, Apple began bundling EFI updates with the macOS updates in order to deliver security patches to all users. But as security firm Duo Labs discovered in late 2017, some Macs aren't getting the right firmware, which makes them vulnerable to hackers. They recommend checking the firmware version and updating if needed. Firmware Passcode LocationOn Intel-based Macs shipped before 2011, the firmware password was stored in the PRAM and read by the system EFI firmware before other PRAM variables. That lead to a serious security issue, allowing the firmware to be revealed in a native macOS app and weakening the enhanced security Apple had hoped to introduce with the addition of the firmware password. In 2011, however, Apple added an important change to the system: the firmware password was moved to a separate programmable controller from Atmel. This component contains lockable flash memory to store the password and requires special programming with identifier numbers for both the Mac's motherboard and the Atmel chip to access and reset it. Since the controller is an independent component, the only way to bypass it is to manually remove it from the motherboard, but this requires highly precise reflow soldering tools and techniques. Bypassing the Mac Firmware Password on MacBooks With Upgradeable RAMThis hardware hack works on both Intel- and Motorola-based MacBooks and requires users to remove the RAM and reinstall it. You can check our guide on how to upgrade the RAM on Macs for further reading.
Disable the Password With Firmware Password Utility
If none of the above methods worked, there are still two more options to try: either have Apple do it for you, so long as you have the original receipt or invoice, or alternatively use any of the EFI lock bypass hardware kits available for sale on various sites. In using one of these EFI lock hardware bypass methods you’ll almost certainly void your warranty, so it is down to you whether you want to risk the procedure. Users who require higher than usual security measures often set a firmware password on a Mac, which requires that a password be entered before the typical OS X boot sequence begins. While these low level passwords are quite secure, but that higher security also means a forgotten firmware password can be a significant problem. Nonetheless, if you wind up in a situation where you or another user has forgotten a low level firmware password on a Mac, don’t panic, because you may be able to recover the password or bypass it using one of the methods outlined below. If all else fails, Apple can possibly help you too. Do note that a firmware password is not the same as an administrator password or the general computer password used to login to a Mac. The firmware password appears immediately upon boot and is a gray locked icon, looking like this: If the password you’re having trouble remembering is a general Mac login or administrator password, you can reset it with these instructions instead. Using the the Apple ID approach on boot is typically the easiest for modern Macs. 1: Try to Reset or Disable with Firmware Password UtilityYou may be able to reset, change, or disable the firmware password using the same method you used to set the password to begin with, this requires booting into Recovery Mode:
If this is successful it will tell you the firmware password is off. Always check your caps key and num lock key before entering or modifying passwords, often mistakes are as simple as that. Obviously you’ll need to enter a password to gain access to Firmware Password Utility, so why is this even mentioned, right? Because sometimes it works, maybe because of user error when typing the password to begin with. Yes you should actually try it. 2: Have Apple Unlock the Mac Firmware Password For YouIf all else fails, you’re going to need to get ahold of Apple or an Apple Authorized Support center who can bypass and/or reset the firmware password using proprietary tools. This works on modern Macs, including the following (this list is not necessarily conclusive, always contact Apple directly if you can not remember your firmware password regardless of the Mac):
You can contact the official Apple Support channels by phone, or schedule an appointment with a Genius Bar at a local Apple Store. Again, even if your Mac is not on that list, you should contact them. In most cases, you will need to provide proof of ownership of the Mac which has a locked firmware password in order for them to unlock the computer in question. There may be exceptions for a variety of unusual circumstances, discuss those with them if necessary. 3: The firmware locked Mac is not included in the above list, and the password reset didn’t work, what now?Wait, did you contact Apple Support or an Apple Authorized Support agent and ask them? They can probably still help you to unlock the Macs firmware login. But if you’re the do-it-yourself type (like myself), then you will find that many older Macs, particularly those that allow you to upgrade and change RAM yourself, allow a hardware bypass to get around firmware passwords by physically removing memory from the computer and following the instructions offered here. That is a fairly technical process, which makes it appropriate for advanced users and systems administrators, but it should not be attempted by a person with novice computer experience. With that said, it does work, and I’ve had to use it myself before in a variety of interesting IT and troubleshooting situations. Have another solution to unlock a Mac with a long forgotten firmware password? Let us know in the comments. |
