Apple Device Support key terms

A macOS feature that encrypts the contents of a startup disk so data cannot be read without valid login credentials or a recovery key. It protects data at rest if a Mac is lost or stolen.

A credential attached to a local macOS user account that authorizes that account to unlock the disk encryption keys used by FileVault. Accounts without a token cannot enable or unlock encryption.

A cryptographic token stored on a Mac with Apple silicon or T2 chip that allows the system to unlock the encrypted startup volume at boot without a person typing a password. It is typically escrowed to a management service.

A long alphanumeric string generated when FileVault is enabled that can unlock an encrypted disk if the user forgets their password. It should be stored securely and separately from the Mac.

A background process definition in macOS that runs system-wide on behalf of the operating system, usually starting at boot without a user logged in. It is stored in system-level LaunchDaemons folders and configured via property list files.

A background process definition in macOS that runs in the context of a specific logged-in user, often used for per-user startup tasks. Agents are stored in user or system Library LaunchAgents folders.

A structured file format used throughout Apple operating systems to store configuration data as key-value pairs, often in XML or binary form. Settings, preferences, and service definitions frequently rely on these files.

A signed XML file that delivers settings to Apple devices, such as Wi-Fi credentials, restrictions, or certificate payloads. Profiles can be installed manually or pushed by a mobile device management service.

A service that remotely enrolls, configures, secures, and wipes Apple devices through pushed commands and profiles. It is the standard way organizations manage fleets of Mac, iPhone, and iPad devices.

An iPhone, iPad, or Mac placed under organizational control, usually through Apple School Manager or Apple Business Manager, which unlocks additional management restrictions and configuration options. Supervision is required for many advanced MDM commands.

A theft-deterrent feature that ties an Apple device to the Apple Account used to enable Find My, preventing reactivation without that account's credentials. Organizations can bypass it for supervised devices through a management service.

A macOS security feature that checks whether downloaded apps are signed by an identified developer and notarized by Apple before allowing them to open. Users can override the block for individual apps in System Settings.

An automated Apple review process that scans software for malicious content and issues a ticket confirming the software is safe to run. Notarized apps satisfy Gatekeeper checks on modern macOS versions.

A macOS protection that restricts even administrative users from modifying protected system files and folders. It prevents malware and accidental changes from altering core operating system components.

A dedicated coprocessor built into Apple silicon and T2 chips that stores encryption keys and handles sensitive operations like Touch ID and passcode verification. It isolates secrets from the main processor and operating system.

Apple's family of system-on-chip processors used in modern Macs, combining CPU, GPU, memory, and security components on a single chip. It replaces Intel processors and enables features like instant wake and unified memory.

A discrete Apple coprocessor found in certain Intel-based Macs that handles secure boot, encrypted storage, and camera processing. It provides security features similar to those integrated into Apple silicon.

A macOS recovery tool used to set the security policy of a Mac's startup disk, such as full, medium, or permissive security and external boot permissions. It applies to Macs with Apple silicon or a T2 chip.

A special startup environment that provides utilities for reinstalling macOS, restoring from backup, erasing a disk, or resetting passwords when the normal system cannot start. Access methods vary by Mac processor type.

A built-in macOS app for viewing, formatting, partitioning, repairing, and erasing storage devices. It also manages disk images and volumes using file systems like APFS.

Apple File System, the default file system on modern Apple devices, designed for flash storage with features like snapshots, encryption, and space sharing. It replaces the older HFS Plus format.

The built-in macOS backup feature that automatically saves hourly, daily, and weekly copies of files to an external drive or network volume. Users can restore individual files or an entire system from these backups.

A macOS utility that transfers user accounts, apps, settings, and files from another Mac, a Time Machine backup, or a Windows PC during setup or later. It helps users move to a new computer without manual copying.

A macOS app that provides a command-line interface to the Unix shell, letting users run commands, scripts, and diagnostic tools. Support staff use it to inspect logs and run utilities not exposed in the graphical interface.

A macOS app for viewing system and application log messages, which helps diagnose crashes, permission errors, and service failures. Users can filter logs by process, subsystem, or message content.

A feature that securely syncs saved passwords, passkeys, and credit card details across a user's Apple devices through end-to-end encryption. It relies on the user's Apple Account and trusted devices for access.

A passwordless sign-in credential based on public-key cryptography that is stored on a device and verified with Face ID, Touch ID, or a device passcode. It resists phishing because it is bound to the website's domain.

A security method requiring two forms of verification, typically a password plus a trusted device code, to sign in to an Apple Account. It reduces the risk of account takeover from stolen passwords.

An Apple device verified with a sign-in code that can receive authentication prompts and verification codes for an Apple Account. Trusted devices help confirm identity during sign-in and account recovery.

A person a user designates in advance who can help regain access to their Apple Account by providing a recovery code. This feature supports account recovery when a user is locked out.

A service that locates lost Apple devices and supported accessories, plays a sound, marks items lost, or erases them remotely. It also enables Activation Lock and offline finding through nearby Apple devices.

A Find My setting that locks a missing device with a passcode and displays a contact message on its screen. It also tracks the device's location while protecting the data on it.

An iOS and iPadOS accessibility feature that limits a device to a single app and controls which screen areas respond to touch. It is often used for kiosks, testing, and users who need focused interaction.

An Apple feature that reports app and website usage and lets users set limits, schedule downtime, and restrict content. It can be managed locally or remotely by a parent or organization.

A peer-to-peer wireless feature that transfers files between nearby Apple devices using Bluetooth for discovery and Wi-Fi for the transfer. Receiving options control who can send files.

A set of Apple features that let devices work together, such as Handoff, Universal Clipboard, iPhone Cellular Calls, and Continuity Camera. These features require signing in with the same Apple Account and enabling Bluetooth and Wi-Fi.

A Continuity feature that lets a user start a task on one Apple device and continue it on another nearby device signed in to the same account. It relies on Bluetooth, Wi-Fi, and proximity.

A short-range wireless technology used to connect peripherals like keyboards, mice, headphones, and AirPods to Apple devices. It also supports features such as AirDrop discovery and Handoff.

A startup mode that makes a Mac appear as an external storage volume to another computer connected by cable, allowing file transfer or repair. On Apple silicon Macs, a similar capability is offered through sharing in macOS Recovery.

A built-in hardware test that checks components like memory, storage, and the battery for failures and returns a reference code for any issue found. It is started by holding the D key at startup on Intel Macs or by holding the power button on Apple silicon.

Nonvolatile random-access memory on a Mac that stores settings such as startup disk selection, display resolution, and speaker volume across restarts. These settings persist when the computer is powered off.

Parameter RAM, an older term for the small memory area on Macs that stores certain system settings such as time zone and startup volume. Resetting it was a common troubleshooting step on older hardware.

The volume containing the operating system that a Mac boots from, which can be changed in System Settings or at startup. Choosing a different startup disk is useful when troubleshooting boot problems.

Dynamic Host Configuration Protocol, a network service that automatically assigns IP addresses and related settings to devices when they join a network. Most Apple devices use it by default for Wi-Fi and Ethernet connections.

Domain Name System, the service that translates human-readable hostnames into IP addresses so devices can reach internet resources. Incorrect DNS settings commonly cause websites to fail to load while other network traffic works.

A numeric label assigned to a device on a network so data can be routed to and from it. It can be assigned automatically by DHCP or configured manually as a static address.

Service Set Identifier, the name that identifies a Wi-Fi network so devices can find and join it. Hiding the SSID is sometimes used as a minor security measure but is not a substitute for strong encryption.

The current Wi-Fi security standard that provides stronger encryption and protection against offline password guessing than earlier protocols. Apple devices support it on compatible networks and routers.

A wireless networking technology that connects Apple devices to local networks and the internet through radio bands such as 2.4 GHz, 5 GHz, and 6 GHz. Signal strength and channel congestion affect performance.

A virtual private network that creates an encrypted tunnel between a device and a remote server, protecting traffic on untrusted networks and providing access to private resources. Apple devices support several VPN protocols and on-demand rules.