FolderSafe questions answered
Short, direct answers. If something is missing, write to [email protected].
Security and AI agents
Can an AI agent or sudo read a locked FolderSafe folder?
No. Locked, the files are AES-256 ciphertext inside the disk image and the visible folder is empty and read-only. Root can copy the image but cannot decrypt it without your password.
And while it is unlocked?
Then it is an ordinary folder. Any app, script or AI agent running as your user can read it. Unlock only when you need the files, and turn on auto-lock.
Is this better than FileVault?
They protect different moments. FileVault protects the disk when the Mac is off or logged out; once you log in, everything is readable. FolderSafe keeps selected files locked while you are logged in and working. Use both.
Which encryption does it use?
The AES-256 encryption of macOS disk images, the same option Disk Utility offers as 256-bit AES. FolderSafe does not use its own cipher for your files.
Can someone brute-force the image?
Anyone with a copy can try passwords offline, as with any encrypted file. A long password is what makes this impractical: use a sentence or four or more random words.
Passwords and recovery
What if I forget my master password?
Click Forgot the master password? and enter your 12 recovery words. FolderSafe checks they belong to this folder, opens it and lets you set a new password.
What if I lose both the password and the words?
The data cannot be recovered. There is no master key and no back door, by design.
Why did Touch ID stop working?
The Touch ID key is tied to the current set of fingerprints on this Mac. After adding or removing a fingerprint, or on a different Mac, unlock with your password and turn Touch ID on again.
Can I change the password?
Yes, in the app. It takes seconds and does not re-encrypt your files. The folder is locked during the change and unlocked again afterwards.
Everyday use
Where are my files actually stored?
In a hidden folder next to the one you see: .name.foldersafe/data.sparsebundle. It grows as you add files. Do not delete or edit anything inside it.
Can I open the files without FolderSafe?
Yes. Double-click data.sparsebundle in Finder and enter the master password, or run hdiutil attach data.sparsebundle.
How do I back it up?
Lock the folder, then copy the whole hidden .name.foldersafe folder to another drive or a cloud folder. The copy stays encrypted.
Why can't I lock it?
An app still has a file open inside. FolderSafe names the app; save and close the file there, or choose Force Lock if you are sure.
Can I put files into the folder while it is locked?
No. The locked folder is read-only on purpose: anything placed there would not be encrypted and would be hidden once you unlock.
Does it work on Windows or Linux?
Not yet. The image format is Apple's. A cross-platform version is being considered.