[cpbotha]

Make sure you get a laptop with a self-encrypting SSD that supports TCG OPal. This will give you maximum speed sector-level encryption. Read this post on my nerd-blog: https://vxlabs.com/2015/02/11/use-the-hardware-based-full-di... (no ads, no referrals, really just info) which explains at a high level how SSD-based encryption works.

The open-source msed tool has now been renamed to sedutil see https://github.com/Drive-Trust-Alliance/sedutil but it still works the same way.

It would still be possible for a sufficiently advanced thief to secure erase the drive (they need to know how to use TCG Opal to do that), but they will never see your data.

[fencepost]

My list of SSD models that support built-in encryption, from a few years ago when I was looking into them. Outdated and possibly incomplete, but a reasonable place to start if you're not just going to pick up a Samsung Evo or Evo Pro.

Samsung 840 & 850 drives (EVO and PRO)

Crucial MX100 and MX200, but NOT BX100

Sandisk X300s

Kingston KC300

OCZ ARC 100

OCZ Radeon R7

OCZ Vector 180

PNY CL4111

Intel 520 series (128-bit only? Old model)

Intel 530 series (old)

Intel 535 series

Intel 730 series

[pokemongoaway]

Is this necessary for optimal security on a MacBook?