Users relying on encrypted HFS+ drives can now convert them directly to APFS without first decrypting them, according to Apple's updated guidelines for macOS 28. This change significantly simplifies the upgrade process for those with volumes protected by FileVault or other legacy encryption. Previously, the recommended path required decrypting the volume before initiating the conversion, an operation that could take hours and require additional storage space. With the new approach, migration becomes faster and more secure, reducing the risk of data loss.
The challenge of converting encrypted volumes
HFS+ (Hierarchical File System Plus) served as Apple's primary file system for decades but has been gradually replaced by APFS (Apple File System) starting with macOS High Sierra. APFS offers advantages such as snapshots, cloning, native encryption, and improved performance on SSDs. However, many users have retained encrypted HFS+ volumes for compatibility or caution. Direct conversion from encrypted HFS+ to APFS was hindered by technical limitations: the conversion process did not handle third-party encryption metadata or FileVault 1 (HFS+ based) correctly. Apple has now resolved this by enabling the converter to recognize and transfer encryption keys properly.
Sponsored Protocol
What the updated guidance changes
According to the revised documentation on the developer portal, macOS 28 Disk Utility includes a new "--encrypted-direct" flag for the diskutil command, allowing conversion of encrypted HFS+ volumes to encrypted APFS with no intermediate steps. The operation preserves the same password or recovery key, and the converted volume is immediately accessible. System administrators can now automate large-scale migrations without manual intervention, reducing downtime. This update is particularly relevant for enterprises that enforce encryption policies on their Mac fleets.
A critical aspect is error handling: if the conversion fails, the original volume remains intact and encrypted. Apple advises performing a backup before proceeding. To explore best practices in data management, refer to the article AI agents are confidently wrong due to bad data engineering, not context, which highlights how solid data architecture prevents migration pitfalls.
Sponsored Protocol
Implications for users and administrators
For end users, this news translates into a smoother upgrade to macOS 28. Anyone with an older Mac using an encrypted HFS+ drive (e.g., from Time Machine or Boot Camp partitions) can now switch to APFS without worry. IT administrators can integrate the conversion into deployment workflows using scripts that leverage the new functionality. Additionally, compatibility with third-party encrypted volumes (such as PGP or TrueCrypt) has been improved, though Apple recommends verifying vendor documentation. Direct conversion also reduces temporary storage consumption since duplicating data during decryption is no longer necessary.
Sponsored Protocol
Another related simplification in data transfer is Google integrates wireless data transfer from iPhone directly into Android 17, showing the industry's push for frictionless data mobility.
Technical background and future outlook
APFS is designed as Apple's universal file system across iOS, iPadOS, tvOS, and macOS. Direct encrypted HFS+ to APFS conversion fills a significant gap for users who have not yet migrated. With macOS 28, Apple has also enhanced RAID volume handling and hybrid partitions. For a deeper understanding of APFS, Wikipedia provides a comprehensive overview. In summary, this guideline update represents a step toward a more cohesive and secure storage ecosystem, removing one of the last obstacles to full APFS adoption.
