Security & Privacy

Your Mac holds your passwords, financial details, photos, and private conversations. Whether you’re setting up a new Mac or reviewing one you’ve used for years, a few settings can help you protect that information.

Everyday tasks like opening downloaded files, browsing websites, and joining public networks come with risks that are worth managing. The good news is that your Mac gives you real control here, if you know where to look. Here are 20 Mac-hardening tips on how to secure your Mac and keep your information private.

Lock down access to your Mac

1. Create a standard (non-admin) account for everyday use

A standard user account limits the system settings you can change during everyday use. It can help prevent accidental changes, but it doesn’t stop all software installation or protect you from every kind of malware.

When a change requires administrator approval, enter the administrator’s username and password only if you trust the request. Keep your administrator account, then sign in to the standard account for everyday use once you’ve created it.

To create a standard account:

1. Click the Apple logo in the top-left corner of your screen and select System Settings.
2. Go to Users & Groups and click Add User.
3. Enter your admin password when prompted.
4. In the setup window that appears, choose Standard from the New User menu, enter your details, and click Create User.

2. Don’t enable automatic login

Automatic login takes you straight to the desktop when your Mac starts, without asking for a password. Anyone with physical access could then open your account and files. Leave it off, whether you use your Mac at home or take it with you.

Go to System Settings > Users & Groups and make sure Automatically log in as is set to Off. If FileVault is on, automatic login is already disabled.

3. Use a password manager

When a company has a data breach, attackers may test leaked username and password combinations against other services. If you reuse that password elsewhere, attackers may be able to access those accounts too.

A password manager can generate and store a unique password for each account, so you don’t have to remember them all. Using a different password for each account helps prevent attackers from using a leaked password to access your other accounts.

macOS includes a built-in option in the Passwords app, or you can use a third-party password manager if you prefer.

Also turn on two-factor authentication for your Apple Account and other important accounts. This makes a stolen password alone less useful to an attacker. For your Apple Account, open System Settings > your name > Sign-In & Security and check that Two-Factor Authentication is on. Keep your trusted phone number up to date.

4. Require a password immediately after sleep or screen saver

If your Mac doesn’t lock the moment the screen goes dark, anyone nearby can get in while you’re away from your desk.

Under System Settings > Lock Screen, set Require password after screen saver begins or display is turned off to Immediately.

Keep malicious software off your Mac

1. Install a two-way firewall for outbound/inbound protection

A firewall filters network connections according to rules about what to allow or block. It can help prevent unwanted access, but it doesn’t scan files for malware or replace antivirus software.

Your Mac comes with a built-in firewall that blocks unwanted incoming traffic, but it doesn’t track data leaving your computer. A two-way firewall like Intego ONE’s Firewall feature also monitors outbound traffic. That outbound monitoring is helpful if a malicious app ever ends up on your Mac and attempts to send data back out.

2. Be wary of software that instructs you to reduce the security on your Mac

Pause if an app asks you to disable Gatekeeper or System Integrity Protection. These protections help prevent untrusted software from running or changing protected parts of macOS. Check the developer’s official instructions before making any security changes.

Some legitimate older apps need security changes to load legacy extensions. Check whether an updated version or an alternative works without those changes. Requests for camera or microphone access are different: grant them only when they make sense for the app. Be wary of unexpected instructions to weaken security, which trojan horses and backdoors may use to gain access.

3. Stick to the App Store and identified developers

Download apps from the Mac App Store or from developers you trust. Your Mac uses Gatekeeper to help prevent you from accidentally installing potentially harmful software.

When downloading an app from outside the App Store, use the developer’s official website or another source you trust. Don’t disable Gatekeeper just to get past a warning. If an app is blocked, check the warning and the developer’s guidance before deciding whether to proceed.

4. Install Mac antivirus software

Antivirus software helps protect your Mac from malware and other threats. Your Mac has built-in antivirus protection (XProtect), but it works in the background rather than as an app you open and manage yourself.

Dedicated Mac antivirus software like Intego ONE Antivirus gives you direct control. You can run a scan whenever you want, review flagged files, and see a clear record of what the app finds. It works alongside your Mac’s built-in protections.

To run a Quick Scan, open Intego ONE, select Antivirus in the left-hand menu, then click Start on the Quick Scan card. A Quick Scan checks key areas most likely to be affected; Full Scan provides a more thorough check.

Wait for the scan to finish, then review the report for the scan type, items scanned and threats found. If nothing is detected, the report says No threats found; after a Quick Scan, you may also see an option to start a Full Scan.

Example of a completed scan report with no threats found. Source: Intego Support; this is an illustration of the result screen, not a scan performed for this guide.

If Intego finds a malicious app or file, it quarantines it so it can’t run. Click Go to Quarantine to review the threat. From there, you can choose how to handle it:

• Repair: Handles the detected threat. Depending on the file, it may remove harmful macros, delete a malicious file, or uninstall a problematic app.
• Ignore: Clears the entry from the quarantine list without changing the file. It does not make the file safe.
• Trust: Adds the file to the Safe List and skips it in future scans. Use this only when you are certain the detection is a false positive.

If you’re unsure about a flagged file, leave it quarantined and contact Intego Support before choosing Ignore or Trust. If the app reports missing permissions or the scan does not complete, follow its guidance or contact Support, then run the scan again. A completed scan with no threats detected is useful information, but it does not prove that every file or online account is secure.

Protect your Mac

5. Avoid pirated software and illegal downloads

Cracked software and downloads from untrusted sources can contain malware that steals data or compromises accounts. Download apps from the developer or another source you trust.

If a paid app isn’t in your budget right now, look for a trustworthy free alternative instead. The risks, like lost data or compromised accounts, outweigh the cost of buying the software outright.

Check your Mac’s security and privacy settings

1. Turn on FileVault

FileVault helps protect the data stored on your Mac if it’s lost or stolen. It requires an authorized login or recovery method to unlock that data. Macs with Apple silicon or a T2 chip already encrypt their internal storage; turning on FileVault adds protection linked to your login credentials.

Open System Settings > Privacy & Security > FileVault and turn it on if it’s off. Follow the prompts to set up recovery, and keep any recovery key somewhere safe and separate from your Mac. Make sure you can use your chosen recovery method if you forget your login password.

2. Review what apps can access

Over time, apps accumulate permissions you may not remember granting. If an app with camera or microphone access gets compromised, it may be used to record without your knowledge. Unneeded location access also creates extra data that could leak in a breach or get sold to advertisers.

Open System Settings > Privacy & Security and go through each category (Location Services, Camera, Microphone, Contacts) to see what’s actually using them.

That said, certain apps do rely on these permissions to function. For example, a navigation tool like Maps needs your location for routing, and a video call app requires your camera and microphone. Even so, you’ll likely spot a few programs holding access they don’t actually require.

3. Turn off Analytics & Improvements

If you’ve agreed to share analytics, your Mac can send Apple usage data and diagnostic reports to help improve its products. Sharing is optional. To review your choices, open System Settings > Privacy & Security > Analytics & Improvements and turn off the sharing options you don’t want.

4. Turn off personalized Apple ads

Apple can personalize ads in services such as the App Store, Apple News, and Stocks. If you prefer, open System Settings > Privacy & Security > Apple Advertising and turn off Personalized Ads. You’ll still see ads, but they won’t be personalized through this setting.

5. Use Safari’s Intelligent Tracking Prevention

When you browse the web in Safari, trackers on websites try to follow your activity across different sites to build a picture of your interests for advertisers.

Safari includes a built-in feature called Intelligent Tracking Prevention, which helps cut down on how much information sites can gather. To make sure it’s turned on:

1. Open Safari.
2. In the menu bar at the top-left of your screen, click Safari, then choose Settings.
3. Go to the Privacy tab.
4. Make sure the box next to Prevent cross-site tracking is checked.
5. On the same tab, make sure **Hide IP address** is checked and set to **from Trackers Only**. If you subscribe to iCloud+ and use Private Relay, you can select Trackers and Websites for a bit more protection.

6. Keep macOS and your apps updated

Updating your Mac does more than add new features. Updates can fix security flaws, including vulnerabilities attackers have already exploited in zero-day attacks. Check for updates in System Settings > General > Software Update.

Turn on automatic updates for macOS updates and Security Responses and system files in Software Update. On macOS 26.1 or later, also open System Settings > Privacy & Security > Background Security Improvements and make sure Automatically Install is on. Automatic updates help keep protection current, but still check for pending updates that need your approval or a restart.

The apps you use every day need regular updates too. For anything downloaded through the App Store, you can check for updates there, or set them to install automatically in the settings. Just open the App Store, click App Store > Settings in the top menu bar, and check the Automatic Updates box.

For apps downloaded elsewhere, check the app’s own settings menu or visit the developer’s website. Some apps also include an option to install updates automatically in the background.

7. Be careful with Wi-Fi auto-join

Your Mac can automatically reconnect to networks you’ve used before. For saved open networks, a matching network name doesn’t prove that you’re connecting to the same hotspot.

An attacker could create an open hotspot with the same name as a coffee shop or hotel network you previously joined. Your Mac may mistake it for the saved network and connect. This is one form of an evil twin attack.

An attacker running the hotspot may be able to monitor unencrypted traffic or direct you toward phishing pages. HTTPS still protects the contents of properly encrypted website connections. Don’t ignore certificate warnings or assume that an encrypted website is trustworthy.

Open System Settings > Wi-Fi and find the saved public network under Known Networks. Click the More (…) button beside it and turn off Auto-Join. If you use public Wi-Fi, confirm the network name with the venue and consider a VPN for added network privacy.

8. Turn off Bluetooth when you’re not using it

Bluetooth uses pairing and authentication to help control connections. Leaving it on doesn’t mean that any nearby device can freely access your Mac. Like other wireless features, though, it can have security flaws, so keep macOS updated and reject pairing requests you don’t recognize.

You can turn it off from the Control Center in the menu bar, or in System Settings > Bluetooth.

If you don’t need Bluetooth, you can turn it off to reduce unnecessary wireless exposure. This will disconnect Bluetooth headphones, keyboards, mice, and other accessories. Bluetooth also supports features such as AirDrop and Handoff, so leave it on when you need them.

Protect your Mac and your data

1. Turn on Find My

If your Mac is ever misplaced or stolen, Find My lets you check its location, lock it from another device, or wipe it clean so your personal information stays private. Here’s how to set it up:

1. Click the Apple logo at the top-left corner of your screen and select System Settings.
2. Click your name at the top of the sidebar. If you don’t see it, select Sign in and enter your Apple Account details.
3. Select iCloud, then See All, and click Find My Mac. (If you see a warning icon next to Find My Mac, open Privacy & Security in your settings and turn on Location Services first.)
   
4. If Find My Mac is off, click Turn On, then select Allow when prompted to let it use your location. If it is already on, leave it enabled.
5. You can also turn on Find My network. This allows nearby Apple devices to safely pass along your Mac’s location, helping you pinpoint it even if it’s offline.
6. Click Done.

2. Use a VPN on public Wi-Fi

A Virtual Private Network (VPN) can add network privacy when you use Wi-Fi in places like coffee shops or airports.

A dedicated Mac VPN encrypts traffic between your Mac and the VPN server, limiting what others on the local network can observe. It also changes the public IP address websites see. A VPN doesn’t stop tracking through signed-in accounts, cookies, or browser fingerprinting, so keep your browser’s privacy protections on too.

3. Set up a real backup strategy

Use a strategy like 3-2-1: keep three copies of important data, including the original and two backups, across two types of storage, with one backup offsite. For example, keep your files on your Mac, use a Time Machine backup on an external drive, and keep another copy with a trusted cloud backup service. This reduces the chance that theft, drive failure, or ransomware will affect every copy.

Set up Time Machine in System Settings > General > Time Machine, then arrange your offsite backup. Encrypt backups that contain personal information and keep the recovery details safe. Keep at least one backup offline or protected from changes by your Mac; if you use a disconnected drive, reconnect it regularly to update the backup, then disconnect it again. Periodically restore a few files to check that recovery works.

How we checked this guide

We checked these instructions on a Mac running macOS Golden Gate (macOS 27), including running an antivirus scan with Intego ONE version 1.4.2. We also checked the scan and quarantine guidance against Intego’s support documentation, and the two-factor authentication and Background Security Improvements advice against Apple’s documentation. Last checked: October 26, 2026. Menus and available options may differ by Mac or software version.

Frequently asked questions

How do I make my Mac more secure?

Start by keeping your Mac and apps updated, enabling FileVault, using a strong password, turning off automatic login, and reviewing which apps can access sensitive information. Beyond that, setting up a two-way firewall, using a VPN on public networks, and adding dedicated antivirus software give you extra protection.

Should I turn off FileVault?

For most people, FileVault should stay on. It helps protect stored data if your Mac is lost or stolen. Keep a recovery method available so you can regain access if you forget your login password.

How do I stop tracking on my Mac?

You can’t prevent all tracking, but you can reduce it. Keep Safari’s anti-tracking protections on, review app permissions, and decide whether to share analytics or allow personalized Apple ads. A VPN changes the public IP address websites see and adds network privacy. It doesn’t stop tracking through signed-in accounts, cookies, or browser fingerprinting.

How do I protect my Mac physically?

Turn on FileVault to help protect stored data and set your Mac to require a password immediately after sleep. Enable Find My so you can locate, lock, or erase a missing Mac when the service can reach it. Keep your Mac with you in public places and store it securely when you’re away.

Does a MacBook have built-in security?

Yes, your Mac includes a range of protections out of the box. These include Gatekeeper to verify apps before they open, XProtect to watch for known malware, and a firewall to monitor incoming connections.

Do Macs need antivirus software?

Macs need protection against malware, and macOS already includes built-in tools such as XProtect. Dedicated Mac antivirus software can add manual scans, clearer reports, and controls for handling flagged files. Keep both macOS and your security software updated.

About Kamso Oguejiofor-Abugu