OS X Yosemite 10.10.3 .plist can't be found My HDD is encrypted. Accessing Terminal from Recovery Mode -> Utilities. The location /var/db/dslocal/nodes/Default/users/ doesn't contain &lt;user&gt;.plist.

There is an user account for sure and I can see it on regular boot.

Any ideas what is wrong and alternatively where can I find password hashes for user accounts.
Nothing is wrong! In Recovery Mode you can't simply access your common users since the Mac is booted to a special recovery image which doesn't contain your familiar accounts except a root user.

To access your common users you first have to unlock and mount the FileVault2 volume and then you can find the hashes at:

/Volumes/&lt;Volume_name&gt;/var/db/dslocal/nodes/Default/users/&lt;user&gt;.plist