What is FileVault?

FileVault encrypts your Mac's entire disk, so a thief who removes the drive gets scrambled data instead of your files. With modern Apple-silicon Macs, the performance cost is effectively zero.

Enable it under System Settings → Privacy & Security → FileVault. Store the recovery key somewhere safe (or in iCloud) — without your password or that key, nobody can decrypt the disk, including you.