Follow these steps:
- Open Disk Utility and click the "new image" button. You want to create a new GUID-based partition map, case-insensitive, HFS-enabled log with 128-bit AES encryption. Say you need a 10 GB image (there should be a lot). Give it a name and save it in your home directory. Give him any password and tell him to save this password in the keychain.
- Open the system settings, accounts, then select the login items and add an entry to open the disk image when you log in: just drag the disk image to the list of login elements. Since you saved the disk image password in the key chain, it will not ask you before it sets it. This is by design.
No one can open a keychain without your credentials (by default, the login has the same password as your account). No one can set the volume without violating your account, key fob or password on the volume.
If someone stole your car and changed your password using the Mac OS X installation DVD, you are still protected, because the keychain password will not be changed and the disk will no longer mount.
This method does not make your account more secure, but protects the contents of the encrypted volume from methods that bypass account credentials to get to the disk — for example, deleting the disk (or loading in target mode) and installing it as an external disk on some either another machine or loading one user and what not.
erickson
source share