Apple Revises macOS 28 Migration Guidance, Simplifying Transition for Encrypted HFS+ Drives

Apple has significantly updated its migration guidance for macOS 28, alleviating a major hurdle for users with encrypted HFS+ (Mac OS Extended) volumes. Previously, preparing these drives for compatibility with the upcoming operating system required either a cumbersome decryption process followed by re-encryption or a complete reformatting, risking data loss and considerable downtime. The revised guidance, published recently, introduces a streamlined third option: direct conversion of an encrypted HFS+ volume to an encrypted APFS (Apple File System) volume without the need for prior decryption. This pivotal change is set to ease the transition for countless users and IT administrators preparing for macOS 28, which marks a definitive shift towards APFS as the foundational file system across Apple’s desktop ecosystem.

Background: The Inevitable Shift to APFS and macOS 28’s Initial Stance

The evolution of file systems is a critical, though often overlooked, aspect of computing, directly impacting performance, data integrity, and security. For decades, Apple relied on the Hierarchical File System (HFS), introduced in 1985, and its successor, HFS+ (also known as Mac OS Extended), which debuted in 1998. HFS+ was a robust file system for its era, supporting larger file sizes, Unicode names, and journaling—a feature that helps protect data integrity in the event of a system crash. It served Apple’s operating systems, including macOS, iOS, watchOS, and tvOS, for nearly two decades.

However, as storage technologies advanced, particularly with the widespread adoption of Solid State Drives (SSDs) and the increasing demands for sophisticated data management features, HFS+ began to show its age. It was not optimally designed for flash storage, lacked native support for advanced features like snapshots and cloning, and its encryption capabilities were an add-on rather than an inherent design element.

Recognizing these limitations, Apple introduced the Apple File System (APFS) in 2017, first rolling it out for iOS devices and later making it the default for macOS High Sierra. APFS was engineered from the ground up to address the shortcomings of HFS+, offering a modern, scalable, and secure foundation for Apple’s hardware and software. Its key features include strong encryption, copy-on-write metadata for crash protection, space sharing, cloning, and snapshots—all optimized for SSDs and flash storage.

With the impending release of macOS 28, Apple signaled its intent to further consolidate its file system strategy, moving definitively away from legacy HFS+ for critical functionalities. A few weeks prior to the recent update, Apple published a crucial support document outlining that "the Mac OS Extended file system format will be supported only for volumes (disks and other storage devices) that aren’t encrypted" starting with macOS 28. This initial directive meant that any user relying on an encrypted HFS+ external drive or other encrypted legacy Mac-formatted volumes would face a mandatory migration. The original guidance provided two primary, and somewhat arduous, pathways: either fully decrypting the volume or erasing and reformatting it using APFS.

Technical Deep Dive: HFS+ vs. APFS and the Encryption Imperative

Understanding the technical distinctions between HFS+ and APFS underscores the significance of this transition.

HFS+ (Mac OS Extended):
Introduced in 1998, HFS+ was an evolution of HFS, primarily designed for traditional hard disk drives (HDDs). Its strengths included:

• Journaling: A mechanism to prevent data corruption during power failures or system crashes by logging changes before they are committed to the file system.
• Support for Large Files and Volumes: Capable of handling volumes up to 8 Exabytes and files up to 16 Exabytes.
• Case-Insensitive (default): Simplifies file management for many users but can lead to issues with certain applications or cross-platform compatibility.
• Basic Encryption: Encryption on HFS+ was typically implemented as an overlay (e.g., FileVault 2 for boot drives or manual encryption for external drives), not as an intrinsic part of the file system’s design.

Despite its long service, HFS+ has several inherent limitations when viewed through a modern lens:

• Inefficient for SSDs: Not optimized for the unique characteristics of flash memory, leading to potential write amplification and reduced SSD lifespan.
• Lack of Native Snapshots: While Time Machine offered backup functionality, true file system snapshots for instant point-in-time recovery were absent.
• Limited Data Integrity Features: Lacked advanced checksumming or self-healing capabilities found in newer file systems.
• No Space Sharing: Each volume within a partition held a fixed amount of space, regardless of actual usage, making flexible storage allocation difficult.

APFS (Apple File System):
Launched in 2017, APFS represents a paradigm shift, engineered for the demands of modern computing and flash storage. Its core advantages include:

• Optimized for Flash/SSDs: Designed to maximize performance and lifespan of SSDs and other flash-based storage.
• Strong Encryption: Encryption is a fundamental design principle, allowing for per-file and multi-key encryption, offering superior data security and flexibility.
• Snapshots: Provides near-instantaneous, space-efficient, read-only copies of the file system, invaluable for backups and data recovery.
• Clones: Enables near-instantaneous, space-efficient copies of files or directories, useful for developers and complex workflows.
• Space Sharing: All volumes within an APFS container share the same underlying free space, dynamically allocating storage as needed, vastly improving flexibility.
• Crash Protection: Copy-on-write metadata ensures data integrity even during unexpected power loss.
• Native TRIM Support: Improves SSD performance and longevity.

The push from HFS+ to APFS, especially for encrypted volumes, is thus not merely an aesthetic preference but a fundamental upgrade to the underlying architecture that manages data. Encrypted volumes, by their nature, contain sensitive information, making robust, native encryption support and efficient data handling paramount. The older HFS+ encryption mechanisms, while functional, were less integrated and potentially less performant than APFS’s native capabilities.

The Initial Challenge: Why the Previous Guidance was Problematic

The initial support document from Apple, which mandated either decryption or reformatting for encrypted HFS+ volumes, presented significant challenges for users and organizations alike.

1. Time and Complexity of Decryption: Decrypting a large external hard drive (which can range from hundreds of gigabytes to several terabytes) is a time-consuming process. It requires the drive to be constantly connected and active for hours, or even days, depending on its size and speed. Furthermore, the act of decrypting then re-encrypting introduces multiple steps, increasing the potential for user error or interruption.
2. Security Risks During Decryption: For a period, the data on the drive would exist in an unencrypted state. While this might be a controlled environment for a personal user at home, it posed a substantial security risk for corporate data, sensitive personal information, or devices used in less secure locations. It violated the principle of "encryption at rest" for the duration of the process.
3. Data Loss with Reformatting: The alternative, erasing and reformatting the drive, meant users would first need to back up all their data to another storage device, then erase the original drive, reformat it to APFS, and finally restore the data. This process is not only time-intensive and requires significant additional storage capacity but also carries the inherent risk of data loss if the backup process fails or is incomplete. For many users with limited additional storage, this was simply not a feasible option.
4. Impact on IT Departments: For businesses managing hundreds or thousands of macOS devices and external storage solutions, the original guidance translated into a massive logistical undertaking. IT departments would face increased helpdesk tickets, significant downtime for employees, and the need to procure additional temporary storage for data migration, incurring substantial operational costs.

These challenges made the transition to macOS 28 for users with encrypted HFS+ volumes a daunting prospect, potentially delaying adoption or forcing users into less secure or riskier practices.

Apple’s Revised Solution: Direct Encrypted Conversion

In a move widely lauded by the tech community and end-users, Apple has now revised its support page, introducing a crucial third option: the direct conversion of an encrypted HFS+ volume to an encrypted APFS volume. This new method eliminates the need for prior decryption or complete reformatting, significantly simplifying the migration path.

The updated instructions from Apple guide users through a process that allows for an in-place conversion, preserving the encrypted state of the data throughout the transition. While the exact technical details of how this in-place conversion works are proprietary to Apple, it likely involves a sophisticated utility that re-writes the file system metadata and structure to APFS while maintaining the cryptographic integrity of the encrypted data blocks. This would mean that the encryption keys remain active and the data itself is never exposed in an unencrypted state during the conversion process.

The benefits of this revised guidance are manifold:

• Enhanced Security: By converting directly from encrypted HFS+ to encrypted APFS, the data remains encrypted at all times, mitigating the security risks associated with temporary decryption.
• Simplified User Experience: The process is streamlined, requiring fewer steps and reducing the cognitive load on users.
• Reduced Downtime: Eliminating the need for full decryption/re-encryption or backup/restore cycles dramatically cuts down the time required for migration. For a large external drive, this could save many hours or even days.
• Preservation of Data Integrity: An in-place conversion is generally less prone to user error and ensures that the original data structure and contents are maintained under the new file system.
• Accessibility: This option makes the transition to macOS 28 far more accessible for users who may not have additional storage for backups or the technical expertise for complex decryption and re-encryption procedures.

This revision reflects Apple’s commitment to user experience and security, demonstrating a responsiveness to the practical challenges posed by its initial, stricter guidance. It ensures that the security benefits of APFS, particularly its native and robust encryption, can be adopted with minimal friction.

The Nuance: Time Machine Exemption

While the direct conversion option is a game-changer for most encrypted HFS+ volumes, Apple has explicitly stated that "this solution doesn’t apply to encrypted Time Machine backup disks." This carve-out highlights the unique and critical nature of Time Machine backups.

Time Machine, Apple’s integrated backup solution, relies on a complex system of hard links and snapshots (though not native APFS snapshots in the case of HFS+ Time Machine volumes) to create incremental backups efficiently. The structure of a Time Machine backup volume is highly specific, designed for continuous, reliable data preservation and easy restoration.

Attempting an in-place conversion of an active, encrypted HFS+ Time Machine volume to encrypted APFS could introduce significant complexities and potential risks to the integrity of the backup history. The conversion process might disrupt the delicate links and metadata crucial for Time Machine’s functionality, potentially rendering past backups unrecoverable or future backups unreliable.

For users with encrypted HFS+ Time Machine backup disks, the original guidance still applies: they will likely need to either erase and reformat the drive to APFS (and then start a new Time Machine backup) or consider alternative backup solutions compatible with macOS 28’s APFS requirement. This distinction is a practical concession to maintain the robustness and reliability of Apple’s essential backup utility, prioritizing data safety over migration convenience in this specific, high-stakes scenario.

Implications for Users and IT Professionals

The revised guidance has broad implications across the macOS ecosystem:

For End-Users:
The most immediate benefit is a significantly smoother and less stressful upgrade path to macOS 28. Users who previously dreaded the laborious process of managing their encrypted external drives can now breathe a sigh of relief. This simplification removes a major barrier to adoption for macOS 28, encouraging more users to update and benefit from the latest security, performance, and feature enhancements that APFS brings. It reinforces the perception of macOS as a user-friendly and secure operating system.

For IT Professionals and Enterprise Deployments:
This change is particularly impactful for enterprise environments. Organizations often manage vast quantities of encrypted data on external drives, shared storage, or legacy systems. The ability to perform an in-place, encrypted conversion drastically reduces the administrative burden, potential downtime for employees, and the need for extensive data migration planning. It simplifies compliance with data security policies by ensuring data remains encrypted throughout the transition. IT departments can now implement a more efficient rollout strategy for macOS 28, minimizing disruptions and resource drain. This also streamlines the process of standardizing all storage to APFS, enhancing overall system security and performance within the corporate infrastructure.

For Third-Party Developers and Peripheral Manufacturers:
While less direct, this shift underscores the complete transition to APFS. Developers of disk utilities, backup software, and other storage-related applications must ensure full compatibility with APFS, including its encryption features and snapshot capabilities. Peripheral manufacturers offering external storage solutions will continue to ensure their products are optimized and pre-formatted for APFS, catering to the evolving macOS standard.

Broader Industry Context: File System Evolution and Data Security

Apple’s decisive move to consolidate its file system strategy around APFS for macOS 28, particularly with this simplified encrypted migration, aligns with a broader industry trend towards modern, resilient, and secure file systems. Competitors like Microsoft (ReFS), Linux (ZFS, Btrfs), and others are also investing heavily in file systems that offer advanced features such as:

• Data Integrity: Through checksumming and self-healing mechanisms to protect against data corruption.
• Snapshots and Clones: For efficient data management, backups, and virtual machine operations.
• Native Encryption: Integrated deeply into the file system for robust security.
• Optimization for Modern Storage: Designed specifically for SSDs, NVMe, and future storage technologies.

Apple’s leadership in providing an accessible path for encrypted data migration showcases its commitment not only to technological advancement but also to practical user experience and robust data security. The emphasis on maintaining encryption throughout the conversion process highlights the paramount importance of data privacy and security in the contemporary digital landscape, where data breaches are a constant threat. This move sets a high bar for secure operating system transitions.

Looking Ahead: The Future of macOS Storage

With macOS 28, Apple is firmly cementing APFS as the sole modern file system for its desktop operating system. This comprehensive adoption promises a more unified, performant, and secure storage experience for all macOS users. Future enhancements to APFS will likely continue to build upon its core strengths, further optimizing for emerging storage hardware and increasingly complex data demands.

The revision of the migration guidance for encrypted HFS+ drives is more than just a minor update; it’s a strategic decision that reflects Apple’s dedication to facilitating a smooth and secure transition to its cutting-edge technologies. By removing a significant barrier, Apple empowers a wider user base to embrace macOS 28 and the full benefits of the Apple File System, reinforcing its position as a leader in innovative and user-centric computing. Users are encouraged to consult the updated support page and prepare their drives in advance to ensure a seamless upgrade experience to macOS 28.