{"id":44393,"date":"2018-04-17T10:02:39","date_gmt":"2018-04-17T15:02:39","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=44393"},"modified":"2019-09-27T16:15:06","modified_gmt":"2019-09-27T21:15:06","slug":"how-to-create-encrypted-disk-images-with-disk-utility-to-protect-private-data","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/44393-how-to-create-encrypted-disk-images-with-disk-utility-to-protect-private-data\/","title":{"rendered":"How to Create Encrypted Disk Images with Disk Utility to Protect Private Data"},"content":{"rendered":"

\"\"The Mac’s Disk Utility app supports a number of capabilities<\/a> that make managing the Mac’s storage system easier. But one set of features seems to get overlooked a bit: the creation and management of encrypted disk images.<\/p>\n

Disk images have many benefits; they can be used to distribute apps and data to users, for creating master image files for various media types, such as CDs and DVDs<\/a>, and for creating archives and backups, as well as quite a few additional creative uses.<\/p>\n

Encrypted disk images allow you to protect the content of the images from prying eyes. Encrypted disk images can’t be mounted, viewed, or accessed unless you know the password associated with the image file.<\/p>\n

In this Rocket Yard Guide, we\u2019re going to look at how to create encrypted disk images. We’ll start with an overview of the basics of disk images and encryption, and then show you how to actually create various types of disk images.<\/p>\n

Encryption Type<\/strong>
\nDisk images support two types of encryption<\/a>: 128-bit AES (Advanced Encryption Standard) and 256-bit AES. The two levels of encryption refer to the size of the keys used in the encryption\/decryption process. The 256-bit encryption is considered more secure than the 128-bit encryption, but the 256-bit encryption also takes longer to encrypt and decrypt. The 128-bit encryption will likely meet the needs of most people, while the 256-bit encryption is a better choice for data that needs a higher level of protection.<\/p>\n

Mounting an Encrypted Disk Image<\/strong>
\nBefore you can make use of a disk image, it needs to be mounted, so your Mac<\/a> can work with the data within it. Mounting an encrypted disk image isn\u2019t much different than mounting a normal disk image; simply double-click the disk image file, or right-click (control-click) the disk image file, and select Open from the popup menu.<\/p>\n

Before the image is mounted, your Mac will display a window that asks you to provide the password to grant access to the information stored within. Enter the password, and click the OK button.<\/p>\n

You can also automate the task of providing the password by selecting the option to \u201cRemember password in my keychain.\u201d When this option is selected, either during the encrypted image file creation (OS X Yosemite and earlier), or when you\u2019re asked for the password when mounting the image (all versions of the Mac OS), the password will be stored within your keychain and used automatically the next time you mount the image file.<\/p>\n

Unmounting an Encrypted Disk Image<\/strong>
\nUnmounting an encrypted disk image returns the image file to an encrypted state, preventing access to the data stored within. You can unmount the image by dragging the mounted image (not the image file) to the trash, or right-clicking on the mounted image and selecting Eject from the popup menu.<\/p>\n

Image Formats<\/strong>
\nDisk Utility supports creating a number of disk image formats that can be used for various projects. Not all of the following formats are available in every version of Disk Utility, or with every method of creating a disk image.<\/p>\n

\"Disk
(Disk Utility supports a number of image formats. The formats that are available can change with the version of the OS, and the method used to create a disk image.)<\/strong><\/figcaption><\/figure>\n

Read only:<\/strong> Allows the content of the mounted image to be viewed, and any files it contains to be opened and read. Additions to the image or changes to any of the files are not allowed. The read only option is only available when creating an image from a folder or drive, or when converting from one image format to another.<\/p>\n

Compressed:<\/strong> Similar to the read only option, but any free space within the image is first removed to reduce the size of the image file. The compressed option is only available when creating an image from a folder or drive, or when converting from one image format to another.<\/p>\n

Sparse image:<\/strong> This type of image format allows the image size to grow and shrink, to accommodate the amount of data stored in the image. The maximum size the image can grow to is set during the image creation process. Sparse image files have the file extension: .sparseimage<\/p>\n

Sparse Bundle disk image:<\/strong> This type of disk image is made up of multiple small files, usually 1 MB, 2 MB, 4 MB, or 8 MB in size. When data stored on this type of image is changed, only the file(s) that contains the changed data needs to be changed, created, or deleted. Just like the sparse image format, a sparse bundle disk image has a flexible size that grows or shrinks to accommodate the data within. The sparse bundle disk image is used extensively with Time Machine. Sparse bundle image files have the file extension: .sparsebundle<\/p>\n

Read\/Write disk image:<\/strong> This image format allows you to add files to the image after it is created. The size of the image file is predefined, and can’t be expanded or reduced once created. Read\/Write image files have the file extension: .dmg<\/p>\n

DVD\/CD master:<\/strong> This image type is used for mastering CDs or DVDs<\/a>. If you\u2019re using OS X El Capitan or later, when this format is selected, the image size field will change to a dropdown menu with 177 MB (CD 8 cm) selected. You can use the dropdown size menu to select any of the standard DVD\/CD sizes. If you\u2019re using OS X Yosemite or earlier, you must manually change the size field to one of the standard DVD\/CD sizes. DVD\/CD images have the file extension: .cdr<\/p>\n

Hybrid image (HFS+\/ISO\/UDF):<\/strong> This image format is used for creating a single image whose files can be used on multiple platforms.<\/p>\n

Note:<\/em> The two sparse image formats have a maximum size that you set during creation. This is the size the image file will appear to have when mounted on your desktop. The actual image file (the .sparsebundle or .sparseimage file) will only use the amount of space needed to hold the data within.<\/p>\n

Create a Blank Encrypted Disk Image<\/strong>
\nLaunch Disk Utility, located at \/Applications\/Utilities.<\/p>\n

\"Options
(Options for creating a new blank disk image are displayed. Be sure to select one of the encryption options from the dropdown menu. macOS High Sierra shown here.)<\/strong><\/figcaption><\/figure>\n

If you\u2019re using OS X Yosemite or earlier, select File, New, Blank Disk Image. You can also select New Image from the Disk Utility toolbar. If you\u2019re using OS X El Capitan or later, select File, New Image, Blank Image.<\/p>\n

A New Blank Image window will open, with various fields and menus to allow you to customize the disk image you will create. Fill in the information needed:<\/p>\n

Save As:<\/strong> Enter the file name for the image. Do not include any file extension; Disk Utility will add the correct extension during the creation.<\/p>\n

Tags:<\/strong> Enter any Finder tags<\/a> for the image file. This option is only available with OS X Mavericks or later.<\/p>\n

Where:<\/strong> Use the dropdown menu to select a location for the file. You can also use the chevron next to the Save As: field to use a standard Save As dialog box to select a location. OS X El Capitan and later uses the standard Save As dialog box, though you can use the dropdown menu method by clicking the chevron icon.<\/p>\n

Name:<\/strong> This is the name of the disk image when it is mounted.<\/p>\n

Size:<\/strong> Use the dropdown menu to select a size for the image. The dropdown menu is prepopulated with sizes commonly used. You can also select the Custom option in the menu and enter any size you wish. OS X El Capitan and later uses a Size field that allows you to enter the size you wish to use in MB or GB.<\/p>\n

\"Disk
(Disk images need a format to use just as drives need to be formatted. Pick a format appropriate for the computer where the image file may be used.)<\/strong><\/figcaption><\/figure>\n

Format:<\/strong> Use the dropdown menu to select one of the standard drive formats to use for the disk image. If you plan to use this image with PCs, select either MS-DOS (FAT) or ExFAT. If you\u2019re only going to use this encrypted image with a Mac, Mac OS Extended (Journaled) is a good choice. This format applies to the image file and not the mounted image. macOS High Sierra and later add the APFS format to the selection.<\/p>\n

Encryption:<\/strong> Use the dropdown menu to select None, 128-bit AES, or 256-bit AES encryption. In OS X El Capitan and later, you\u2019ll be asked to create and verify a password once you select an encryption type.<\/p>\n

\"Use
(Use the Partition Map dropdown list to select one of the available partition types to use.)<\/strong><\/figcaption><\/figure>\n

Partition Map:<\/strong> The dropdown menu allows you to select from:<\/p>\n