What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Secure setup starts in Setup Assistant, not after you reach the desktop or Home Screen. Use a trusted network, create a strong local unlock credential, secure your Apple Account with two-factor authentication, enable Find My, install updates, and verify recovery options before loading sensitive data. MacBook owners should also configure FileVault; iPad owners should use the passcode-based data-protection path instead.
Before you begin
Keep the new MacBook or iPad connected to its charger if the battery is low. Have the Apple Account you intend to keep using available, along with access to a trusted phone number or an already trusted Apple device. You may also need the password for your Wi-Fi network and, if you are moving from another device, the old device itself.
Use a network you trust, such as your private home network or a known business network. Avoid completing account sign-in or migration on an open public hotspot. Setup Assistant content can vary by model, operating-system version, country or region, and whether an organization manages the device. Apple documents the available panes and management controls in Manage Setup Assistant for Apple devices, so do not assume that another person’s screens will be identical to yours.
- Keep the previous device nearby if you plan to use device-to-device migration on iPad or migrate data to a Mac.
- Decide whether this is a personal device or one that will be enrolled by an employer or school. Managed enrollment may add, remove, or lock certain choices.
- Do not photograph or share passwords, passcodes, verification codes, or recovery information while setting up.
Complete Setup Assistant without weakening security
Turn on the device and follow the on-screen Setup Assistant. Read each pane instead of accepting every default automatically. Apple includes account sign-in, local password or passcode creation, software-update choices, and other security-related screens; the exact order and wording depend on the device and software version.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
1. Choose the correct ownership and migration path
When asked whether to transfer information, select the source you actually control. On iPad, Setup Assistant may offer device-to-device migration. Keep both devices close, unlocked, and connected to power until the transfer finishes. If the iPad is supplied by an employer or school, automated enrollment may appear instead; follow the organization’s instructions rather than trying to bypass management.
On a MacBook, migrate only from a backup or computer you trust. A clean setup is safer than importing unknown utilities, old administrator accounts, or extensions you no longer need. You can move documents later after confirming that the new account and updates work.
2. Create the local unlock credential
For iPad, create a passcode that is difficult to guess and not reused elsewhere. For MacBook, create a strong login password. This credential is the local barrier protecting the device when it is locked, restarted, or waking from certain security states. A long, unique phrase is generally easier to remember than a short predictable pattern.
Enable Touch ID on a supported MacBook or Face ID or Touch ID on a supported iPad if the feature is useful to you. Biometrics make routine unlocking easier, but they supplement rather than replace the passcode or password: the device can require the underlying credential after a restart, after a security timeout, or when biometric authentication is unavailable. Apple describes these local protections in Passcodes and passwords.
3. Sign in to your Apple Account carefully
Sign in with the Apple Account you intend to use for purchases, iCloud data, backups, Find My, and future device recovery. Check the account identifier before accepting prompts so that you do not attach the new device to a family member’s or former employer’s account.
New-device sign-in can require the account password and a six-digit verification code delivered to a trusted device or trusted phone number. Apple says two-factor authentication is designed to ensure that only you can access the account even if somebody else knows the password; see Two-factor authentication for Apple Account. Never tell a caller, texter, or pop-up support contact that code. An unexpected request for it is a warning that someone may be trying to sign in.
Rank #2
- NIST Certification: FIPS 140-3 validated for government and regulated organizations (Overall Level 2, Physical Security Level 3).
- Works with 1000+ Accounts: Supported by Google and Microsoft accounts, Identity Access Managers, password managers and 1000+ popular services. It works with operating systems and browsers including Windows, macOS, Chrome OS, Linux, Chrome, and Edge.
- Fast & Convenient Login: Plug in your YubiKey via USB-C and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required.
- Most Secure Passkey: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- Built to Last: Made from tough, waterproof, and crush-resistant materials. Made in Sweden with the highest security standards.
4. Review trusted devices and phone numbers
After sign-in, open your Apple Account settings and confirm that the new MacBook or iPad appears in the device list. Verify every trusted phone number and remove numbers you no longer control. Keep at least one trusted route available before changing an old phone or wiping the previous device.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →If you need to create an account during setup, Apple explains the account-creation process at How to create a new Apple Account. Use an email address and phone number you expect to retain; an address controlled by a school or employer can become inaccessible when that relationship ends.
Turn on Find My and confirm anti-theft protection
Enable Find My when Setup Assistant offers it, or turn it on immediately afterward in the device’s Apple Account settings. Find My helps you locate a missing device and supports remote actions. On iPad, enabling Find My also enables Activation Lock, which links reactivation to the associated Apple Account. Apple explains the iPhone and iPad behavior in Activation Lock for iPhone and iPad.
Activation Lock can remain a deterrent even after you remotely erase a lost iPad. Do not remove the iPad from Find My merely because you erase it remotely; removing the device can release the lock that prevents another person from setting it up.
MacBook coverage has a hardware and software condition. Apple identifies Activation Lock support on Macs running macOS Catalina or later when the Mac has Apple silicon or a T2 Security Chip. Older Intel Macs without a T2 chip should not be assumed to have the same Activation Lock protection. Check the Mac model and operating-system version before relying on that feature.
Verify Find My after setup
- Open the Apple Account settings and select the new MacBook or iPad in the device list.
- Confirm that Find My is enabled for that device and that location services are allowed where the feature requires them.
- From another trusted Apple device or the Find Devices service, verify that the new device appears with a recent location or online status.
- Return to the new device and make sure you know the Apple Account password needed to disable Find My or erase the device later.
MacBook: configure FileVault and its recovery path
FileVault is the Mac-specific control for protecting data on the startup volume. It encrypts the volume and requires user authentication to unlock it. iPad does not have a FileVault setting, so do not search for one there.
Rank #3
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Setup Assistant may present a FileVault pane. Turn it on when offered, then read the recovery choices carefully. If FileVault was not enabled during Setup Assistant, you can enable it later in the Mac’s Privacy & Security settings under FileVault. The exact label can vary by macOS release.
Apple notes in Intro to FileVault that Apple silicon and T2-equipped Macs have volume encryption with a key protected by the Secure Enclave even when FileVault was not enabled during Setup Assistant. Enabling FileVault still adds a distinct login-authentication protection for the volume. Treat the recovery method as seriously as the password: store it in a secure password manager or another protected location, never in an unencrypted note beside the Mac, and make sure a trusted person or documented organizational process can access it if your policy requires that.
Check that FileVault is actually enabled
- Open System Settings.
- Select Privacy & Security, then FileVault (the wording may differ slightly by macOS version).
- Confirm that FileVault reports protection as enabled or that encryption is complete.
- Record the recovery option shown by the system without copying it into an exposed document.
- Restart once, when convenient, and confirm that the expected account authentication is required before the Mac becomes usable.
If the Mac belongs to an organization, do not change FileVault recovery settings without checking its administrator. A management profile may escrow a recovery key or enforce a particular policy.
Free tools Windows power users keep installed
One-click scans. No signup required.
iPad: use the passcode and data-protection path
On iPad, the passcode is the central local protection. Set it during Setup Assistant and keep it unique. iPad data protection is integrated with the passcode and hardware security; there is no separate FileVault switch to enable.
Turn on Face ID or Touch ID where supported, then review which actions are allowed while the iPad is locked. Disable lock-screen access to information you consider sensitive, such as notification previews, if someone could read them without unlocking. These options are in the iPad’s Face ID/Touch ID and Passcode settings; labels and available controls vary by model and iPadOS version.
Confirm the iPad’s recovery options
- Know the Apple Account password associated with the iPad before you sign out, erase, or transfer it.
- Keep a current backup method available, such as an approved iCloud backup or a trusted computer backup, before storing irreplaceable work on the device.
- Verify that Find My is on so Activation Lock can protect the iPad if it is lost.
- Do not disclose the passcode to anyone who only needs temporary access; use an appropriate sharing or guest workflow instead.
Install updates and review automatic-update behavior
Install every update offered during Setup Assistant unless an organization has told you to wait for a specific release. After setup, open System Settings > General > Software Update on Mac or Settings > General > Software Update on iPad and check again. Install the latest compatible operating-system update, then restart when prompted.
Rank #4
- Works with 1000+ Accounts: It’s compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- Fast & Convenient Login: Plug in your YubiKey 5C NFC or Nano 5C via USB-C and tap it, or tap the YubiKey 5C NFC against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required.
- Most Secure Passkey: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- Built to Last: Made from tough, waterproof, and crush-resistant materials. Made in Sweden with the highest security standards.
- Yubico Authenticator App: Compatible with the safest authenticator app experience across mobile and desktop.
Review automatic-update controls rather than assuming they are enabled or disabled. Apple documents update installation, security-response controls, and enforcement for managed devices in Install and enforce software updates for Apple devices. That documentation describes capabilities and supervised-device policies; it does not mean every consumer MacBook or iPad exposes identical switches. Leave security updates enabled unless a documented compatibility requirement says otherwise, and set a schedule that allows the device to restart promptly.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteAfter an update
- Run Software Update again until no additional update is offered.
- Confirm the displayed operating-system version and note it for support or workplace records.
- Open the App Store and update installed apps, especially password managers, browsers, and communication tools.
- Restart once after major updates and test unlocking, Wi-Fi, cellular service if applicable, Touch ID or Face ID, and Find My visibility.
Perform a first-session privacy and account review
Security is not finished when Setup Assistant closes. Spend a few minutes removing unnecessary exposure before restoring every app and account.
Review account and sharing settings
- Check which iCloud services are enabled and turn off synchronization you do not want on this device.
- Review family, purchase, and location-sharing memberships for accounts that should not be attached to the new device.
- Remove old trusted devices from the Apple Account list only after confirming that you no longer need them for verification or recovery.
- Use separate standard accounts for other Mac users instead of sharing your administrator login password.
Review permissions as apps are installed
Install apps from sources you trust and read each request for location, microphone, camera, contacts, files, Bluetooth, and notifications. Grant the least access needed for the app’s function. Revisit permissions after installing a group of apps; a rushed setup can otherwise leave broad access enabled indefinitely.
Protect the physical device
Use a case or sleeve that does not obstruct cameras, microphones, vents, or biometric sensors. Keep the MacBook or iPad with you in public, and avoid leaving an unlocked device unattended. A strong digital setup cannot recover data exposed through a stolen, already-unlocked device.
Optional: use security keys for a higher-risk Apple Account
Most people can secure an Apple Account with a strong password and two-factor authentication. Physical security keys are an optional step for people facing targeted phishing, valuable accounts, or a policy that requires hardware-backed sign-in.
Apple’s About Security Keys for Apple Account names YubiKey 5C NFC as an example and requires at least two security keys before the feature can be enabled; up to six keys can be paired. Keep one key as a protected spare in a separate location. A single key is not a safe plan if losing it would prevent you from signing in.
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Understand the recovery trade-off before enabling the feature. Apple warns that losing all trusted devices and all registered security keys can cause permanent account lockout. Do not enroll keys until you have tested both keys, documented where the spare is stored, and confirmed that the connectors or NFC method work with the devices you actually use. Compatibility statements for a key do not establish that every iPad model supports every connection method.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.MacBook and iPad security controls compared
| Security question | MacBook | iPad |
|---|---|---|
| Local unlock | Strong Mac login password; Touch ID may add convenient biometric unlocking on supported models. | Strong iPad passcode; Face ID or Touch ID may add biometric unlocking on supported models. |
| Storage protection | Configure FileVault. Apple silicon and T2 Macs also have hardware-backed volume encryption, but FileVault adds a separate login-authentication protection. | Use the built-in passcode and data-protection path. There is no FileVault setting. |
| Find My and Activation Lock | Find My is available; Apple identifies Activation Lock eligibility for Apple silicon or T2 Macs running macOS Catalina or later. | Find My enables Activation Lock, which can continue deterring reuse after a remote erase. |
| Setup differences | Setup Assistant may show a FileVault pane and Mac-specific account or migration choices. | Setup Assistant may offer device-to-device migration and iPad-specific passcode and biometric choices. |
| Account security | Apple Account two-factor authentication, trusted phone numbers, trusted devices, and optional security keys apply to both platforms. | |
Verify the finished setup with a security checklist
Use this checklist before loading confidential files or handing the device to a family member:
- A strong, unique Mac login password or iPad passcode is set.
- Touch ID, Face ID, or both are enabled where supported and useful.
- The correct Apple Account is signed in.
- Two-factor authentication is active, and trusted phone numbers and devices are current.
- Find My shows the new device; iPad Activation Lock is therefore enabled.
- For a MacBook, the model and macOS version meet the Apple silicon/T2 and Catalina-or-later conditions if you are relying on Mac Activation Lock.
- FileVault is enabled on the MacBook and its recovery method is stored safely.
- The iPad uses its passcode-based data protection; no FileVault setting is expected.
- Operating-system and app updates are installed, and automatic-update choices have been reviewed.
- Backups or another approved recovery method are configured before important data is created.
Troubleshooting common setup problems
The verification code does not arrive
Check that the trusted phone number has service and that another trusted Apple device is online. Request a new code only after confirming the sign-in attempt is yours. If the number or trusted device is no longer available, use Apple’s account-recovery process rather than accepting help from an unsolicited caller.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Setup Assistant is missing a setting
Do not infer that the feature is unsupported. The pane may be later in the flow, named differently in your software version, or hidden by an organization-management profile. Finish setup, install updates, and search the relevant System Settings or Settings category. Managed devices can intentionally restrict changes.
FileVault is not listed
Confirm that you are on a MacBook and looking under Privacy & Security, not on an iPad. If the Mac is managed, an administrator may control the setting. On Apple silicon and T2 Macs, the volume is encrypted by the hardware even if FileVault was not enabled during Setup Assistant, but you should still enable FileVault for the additional login-authentication protection when policy and recovery planning permit.
The old device still appears in Find My
That may be expected until you sign out and erase the old device. Do not remove the new device from Find My to solve an old-device listing problem. First verify which hardware identifier belongs to which device, then retire the old device through the normal backup, sign-out, erase, and transfer process.
You may lose access to a security-key-protected account
Stop before removing the remaining trusted device or key. Locate the spare key, test it, and confirm that at least two keys remain registered. If all trusted devices and keys are gone, Apple warns that recovery may be impossible.
Recommended Free Tools
When organization management changes the process
An employer or school may use automated device enrollment, supervised settings, required passcodes, FileVault key escrow, application controls, or enforced update policies. Those controls can alter Setup Assistant screens and prevent you from changing certain settings. Apple documents these deployment options in Manage Setup Assistant for Apple devices and its software-update deployment guidance.
For a managed device, record the help-desk or administrator contact shown during enrollment. Do not erase management profiles, create an unapproved personal account, or store an organizational recovery key in a personal vault. If the device is later transferred to you, ask the administrator to release it correctly so Activation Lock and enrollment do not block the next owner.
Quick Recap
The secure first-session order
- Connect to a trusted network and follow Setup Assistant.
- Choose the correct migration or organization-enrollment path.
- Create the Mac login password or iPad passcode, then add supported biometrics.
- Sign in to the intended Apple Account and complete two-factor authentication.
- Verify trusted phone numbers and devices.
- Enable Find My and confirm the device appears in the device list.
- On MacBook, enable FileVault and secure its recovery method.
- On iPad, review passcode, biometric, lock-screen, and backup settings.
- Install operating-system and app updates and review automatic-update controls.
- Complete the checklist and only then restore sensitive data or enroll optional security keys.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
