Mac Recovery Mode Explained (and the Fixes You Can Actually Run)

Your Mac shows the Apple logo, a progress bar appears, the bar gets to about 50%, and then the screen goes black. Or it boots fine to the login screen and then panics. Or it boots fine but every app crashes immediately. Each of these is a recovery-mode situation, and all of them have specific fixes that don’t require reinstalling macOS.

Recovery Mode is a small bootable environment Apple puts on every Mac alongside the main OS. It’s a stripped-down macOS with a handful of tools — Disk Utility, Terminal, the Reinstall macOS installer, Safari, and (depending on the Mac) a few extras. Most people only know Reinstall. The other tools fix more problems than the reinstaller ever will.

How to Enter Recovery

The path differs on Intel vs. Apple Silicon Macs.

On Intel Macs:

• Hold Cmd+R while powering on. This boots the local Recovery partition installed alongside macOS.
• Hold Cmd+Option+R to use Internet Recovery, which downloads Recovery from Apple’s servers (slower, but works if the local Recovery is broken).
• Hold Cmd+Option+Shift+R to install the macOS that originally shipped with the Mac (or its closest still-available version).

On Apple Silicon Macs (M1/M2/M3/M4):

• Hold the power button while turning on, until you see “Loading startup options.”
• Click Options → Continue.
• You’ll see Recovery’s main window.

Apple Silicon doesn’t have separate hotkeys for Internet Recovery. The unified “Startup Options” screen handles everything.

If your Mac is on (not powered down), you’ll need to shut it down first. A normal restart-and-immediately-hold-keys sequence won’t work — Apple Silicon, in particular, requires a cold boot for Startup Options.

What’s in the Recovery Window

After entering Recovery, you’ll see a window titled “Recovery” or “macOS Utilities” with a few options:

• Restore from Time Machine Backup — pull a backup onto this Mac
• Reinstall macOS — download and reinstall the current macOS
• Safari — yes, a browser, for downloading drivers or reading docs
• Disk Utility — for repairing or erasing volumes

In the menu bar at the top, the Utilities menu adds:

• Terminal — the shell, with several diagnostic tools
• Startup Security Utility (Apple Silicon: under “Options”) — boot security settings
• Network Utility (older macOS) — basic network diagnostics
• Share Disk (Apple Silicon) — turn this Mac into a USB-C target disk

Each one is a discrete tool. You can use any of them without committing to a reinstall.

Disk Utility in Recovery

This is the most common reason to enter Recovery, and the most common reason it actually solves things.

Running First Aid on the boot volume in normal mode is read-only — the system can check but not repair the volume it’s running from. In Recovery, the boot volume isn’t being used as the system, so First Aid can actually write fixes.

Steps:

1. Open Disk Utility from the Recovery menu
2. View → Show All Devices
3. Select the parent device (not the volume)
4. First Aid

If the parent passes, run First Aid on each volume below it.

Common things this fixes:

• “Mac won’t fully boot” caused by filesystem corruption
• Files that mysteriously can’t be opened
• Disk Utility errors that appear in normal mode

If First Aid finds problems it can’t repair and the boot drive is otherwise healthy, the next step is usually a reinstall of macOS over the existing system (which preserves data).

Power users use SweepSweep handles all the cleanup that articles like this describe. Get Sweep free →

Terminal in Recovery

The Utilities menu has Terminal. It’s a slimmed-down shell — many tools you’d expect aren’t there — but the essentials are.

Tools you can use:

• diskutil — disk operations, more granular than Disk Utility’s GUI
• fsck_apfs — filesystem check, with options the GUI doesn’t expose
• csrutil — System Integrity Protection enable/disable
• bless — set the active boot volume
• nvram — read/write NVRAM (useful for clearing certain settings)
• resetpassword — yes, the password reset GUI is launched from here

To launch the password reset utility:

resetpassword

That opens a GUI window for resetting any user account on the Mac, assuming you have either iCloud account access (T2/Apple Silicon) or are willing to wipe FileVault.

To check SIP status:

csrutil status

To disable SIP (only do this if you have a specific reason — affects security):

csrutil disable

To zap NVRAM from Recovery (this used to be Cmd+Option+P+R at boot, but that’s deprecated on Apple Silicon):

nvram -c

Startup Security Utility

On Intel Macs with the T2 chip, this is in the Utilities menu. On Apple Silicon, it’s accessed differently — boot to Startup Options, select your boot disk, and use Options → Security.

The settings:

• Secure Boot (Intel T2) — Full Security, Medium Security, No Security
• External Boot (Intel T2) — allow or disallow booting from external media
• Reduced Security mode (Apple Silicon) — required to install certain kernel extensions or run unsigned code

These exist to allow advanced users (developers, security researchers, dual-boot enthusiasts) to relax the boot-time security guarantees in exchange for flexibility. For most users, leave the defaults alone.

Restore from Time Machine

If you have a recent Time Machine backup and the Mac is in a worse state than the backup, this is the cleanest path. It erases the boot volume and restores the entire system to the point of the backup.

Caveats:

• Requires your Time Machine destination to be accessible (USB, networked, etc.)
• Encrypted Time Machine backups need their password
• Takes hours for a multi-hundred-GB restore
• Restores everything: apps, documents, settings, login items

Don’t use this for “I lost a few files” — it’s overkill. For “the system is broken and I want it back to how it was three days ago,” it’s exactly right.

Reinstall macOS

The big-ticket item. Reinstalling macOS in Recovery installs the current version of macOS over your existing install without erasing user data, unless you specifically erase the disk first.

What it does:

• Downloads the macOS installer from Apple
• Replaces the system volume contents with a fresh copy
• Leaves the data volume (Macintosh HD - Data) untouched
• Reboots into the freshly installed system

What it doesn’t do:

• Erase your apps, documents, or settings (unless you erase the disk first)
• Update macOS to a newer version (it reinstalls the version that’s currently set up)
• Fix corrupted user data

This is the right move when:

• The system feels persistently broken in non-specific ways
• After an interrupted update that left things half-installed
• When you suspect malware has touched system files

For going to a newer macOS, use System Settings → General → Software Update from a working system, not Recovery.

There’s a faster waySweep does this kind of cleanup automatically. Try Sweep free →

Erase All Content and Settings vs. Reinstall

A subtlety worth knowing: since Monterey, the better way to “wipe and start over” is System Settings → General → Transfer or Reset → Erase All Content and Settings (similar to iPhone). This is faster, more reliable, and wipes more thoroughly than a Recovery-mode erase.

Use Recovery’s erase + reinstall when:

• The system is too broken to launch System Settings
• You’re selling the Mac to someone else (Erase All Content and Settings is also fine here, but Recovery is more thorough)
• You’re cloning identical setups

Apple Silicon Share Disk Mode

Unique to Apple Silicon: the ability to make this Mac act like a USB-C external drive for another Mac. From Startup Options → Utilities → Share Disk:

1. Select the volume to share
2. Connect a Thunderbolt/USB-C cable to another Mac
3. The other Mac sees this Mac’s drive in Finder

This replaces what Target Disk Mode used to do on Intel Macs. Useful for:

• Recovering data from a Mac that won’t boot
• Transferring large amounts of data between Macs without going through the network

The other Mac needs to be running macOS Big Sur or later for compatibility.

Internet Recovery Specifically

If your local Recovery partition is damaged or missing, Internet Recovery downloads a recovery environment from Apple’s servers. It’s slower (depends on internet speed) but more reliable as a fallback.

On Intel: Cmd+Option+R at boot. On Apple Silicon: there’s no separate hotkey — Startup Options handles everything, and if it can’t load locally, it’ll fall through to network.

Internet Recovery requires:

• Internet connection (Wi-Fi via the network selector)
• A Mac that’s eligible for the macOS version you’re recovering
• Time — it downloads a sizable recovery image

When Recovery Itself Is Broken

If Recovery itself fails to load, your options narrow:

On Intel:

• Try Internet Recovery (Cmd+Option+R) — different startup path, same machine
• Boot from a USB installer made on another Mac
• Apple Service for hardware-level diagnosis

On Apple Silicon:

• Apple Configurator on another Mac, with a USB-C cable, to revive or restore the firmware
• Apple Service if the Mac is genuinely bricked

The Apple Configurator method (Apple’s “DFU” mode for Macs) is documented at Apple’s support site and requires a second Mac running macOS Monterey or later, plus a specific USB-C cable. It’s the last-resort recovery path.

What Recovery Doesn’t Do

For all its utility, Recovery isn’t a magic fix-it tool. It can’t:

• Recover deleted files (use a backup or specialized recovery software)
• Diagnose hardware failures (use Apple Diagnostics for that)
• Update macOS to a newer version
• Touch firmware-level issues (those need Apple Configurator on Apple Silicon, or service)

The right model: Recovery is for when macOS can’t fix itself from inside macOS. The set of problems that fit that description is meaningful but bounded. For everything else, you have a working Mac and the regular tools available within it.