Protect your Mac's data if it's lost or stolen

If your Mac ever goes missing, the first line of defense is a login wall that's already up. macOS, by default, waits a few minutes after the screen sleeps before it asks for a password — so a laptop snatched from a table can be woken straight into your session. Setting the requirement to Immediately closes that gap, and it's the foundation you build FileVault and Find My on top of.

Start with the setting that costs nothing

Theft protection is layered, but the cheapest, fastest layer is making sure a locked screen is actually locked. With the default grace period, someone who lifts the lid within minutes of it closing gets your open desktop — email, browser sessions, saved logins, everything. Requiring the password immediately means the thief hits the login window the moment they wake it, every time.

1. Open System Settings → Lock Screen.
2. Find Require password after screen saver begins or display is turned off.
3. Set it to Immediately.

This behaves the same on macOS 13 Ventura, 14 Sonoma, and 15 Sequoia. Prefer the command line? The two keys live in com.apple.screensaver:

# Require the password immediately
defaults write com.apple.screensaver askForPassword -int 1
defaults write com.apple.screensaver askForPasswordDelay -int 0

# Undo: restore a delay, or delete the keys
defaults write com.apple.screensaver askForPasswordDelay -int 300
defaults delete com.apple.screensaver askForPassword

On macOS 14 and 15 the Lock Screen dropdown is what the login window reads; if a Terminal change doesn't appear to take, confirm the dropdown shows Immediately.

Why the password wall alone isn't enough

Here's the honest limit: requiring a password stops someone from using your session, but on its own it doesn't stop a determined thief from pulling the drive or booting into a recovery environment to reach your files. The login screen guards the front door; it doesn't encrypt what's inside. For lost-or-stolen scenarios, you want the data itself unreadable without your password.

That's FileVault. With it on, the entire disk is encrypted, and your account password is what decrypts it at startup. A thief who removes the drive or reinstalls macOS gets scrambled data, not your files. The immediate-password setting and FileVault work together: one keeps a running Mac locked, the other keeps a powered-off Mac's data sealed.

Layer it up for a lost machine

• Turn on FileVault — System Settings → Privacy & Security → FileVault. This is the setting that actually protects data at rest.
• Enable Find My Mac so you can locate it, play a sound, mark it lost, or erase it remotely.
• Save your FileVault recovery key somewhere safe — you'll need it if you ever forget your password.
• Use a strong login password, since with FileVault on it's the key to everything.

Together these turn a lost Mac from a data breach into an inconvenience: locked immediately, encrypted at rest, and trackable or wipeable from another device.

A quick manual lock for the "I set it down" moment

Most losses start with a Mac left unattended for a second too long. Make locking instant and deliberate: Control + Command + Q locks the screen on the spot, and with the delay at zero that keystroke is a true lock, not a countdown. Building that reflex means the machine is protected before it's ever out of your hands.

Encrypt the drive next

The immediate-password setting is the front door; encryption is the vault. Walk through it in how to turn on FileVault on Mac so a stolen drive gives up nothing.