Apple T2 Security Firmware Password Removal

The Apple T2 Security Chip is Apple’s second-generation, custom silicon for Mac. The T2 chip delivers capabilities to your Mac, such as encrypted storage and secure boot capabilities, enhanced image signal processing, and security for Touch ID data.

macOS on Intel-based Mac computers with an Apple T2 Security Chip supports the use of a Firmware Password to help prevent unintended modifications of firmware settings on a specific Mac. The Firmware Password is designed to prevent selecting alternative boot modes such as booting into recoveryOS or Single User Mode, booting from an unauthorised volume or booting into Target Disk Mode.

If a firmware password has been enabled, you will not be able to use the following startup items:

  1. Target Disk Mode – (T)
  2. Netboot (N) – (Remember Netboot?)
  3. Single User Mode – (Command S)
  4. Verbose Mode – (Command V)
  5. Eject CD-ROM or DVD – (Eject Key)
  6. Safe Mode – (Shift Key)
  7. Reset PRAM – (Option-Command-P-R)
  8. Hardware Diagnostics – (D)

The following startup options will work, but you will be prompted for the firmware password.

  1. Recovery Mode – (Command R)
  2. Internet Recovery – (Command Option R or Command Option Shift R)

If you have proof of ownership, Apple can remove the firmware password and retain your data for Mac Devices from 2011-2020. They will walk you through a process (Shift-Control-Option-Command-S) that will show you a code that you can give the Apple support agent. The agent will use that code to send you a file so you can create a USB boot disk that will remove the firmware password.

Have you lost or forgotten your MacBook firmware password? We can help. If you have a MacBook 2018 and onwards, we can remove the T2 firmware password. Please get in touch with us to discuss this further.