Just verified this: macOS Tahoe 26 is the first release that accepts inbound SSH connections on FileVault-protected Macs before first unlock ("BFU", i.e. after a cold boot).

Process:

1. Just SSH in as you always would
2. Be disconnected as macOS finishes booting
3. SSH back in

Justin Searls

macOS Tahoe 26 introduces the ability to accept inbound SSH connections on FileVault-protected Macs before the first unlock after a cold boot. The process involves SSHing in normally, being disconnected as macOS finishes booting, then reconnecting via SSH again.

Just verified this: macOS Tahoe 26 is…

<p>I think the only question I have is, “On purpose?”</p>
