About FileVault
FileVault is a disk-encryption program on Mac computers. With it, you can encrypt folders and protect them with a password. Individual files and folders in an encrypted FileVault image are locked away and cannot be accessed using Time Machine. However, Apple provides another application that can access FileVault data: the Finder. This isn’t a backdoor that allows just anyone to access encrypted files. You still need to know the user account password to gain access to the files, but it provides a way to restore a single file or group of files without having to perform a complete restore from the Time Machine backup. The not-so-secret part of this tip is that the Time Machine copies only the encrypted sparse bundle image that is your FileVault home folder. By using the Finder, you can browse to the backed-up folder, double-click the encrypted image, supply the password, and the image will mount. You can then find the file you want, and drag it to the desktop or another location.
Using the Finder to Access FileVault Backups
Here’s how to open a FileVault Backup: When you’ve finished copying the files you want, be sure to log out or unmount the username.sparsebundle image.
