Mac privacy settings checklist: 12 settings to change in macOS
macOS is more private than most systems out of the box, but a handful of defaults still share more than they need to. Twenty minutes in System Settings fixes most of them.
Each item below says where the setting lives in System Settings on macOS 13 Ventura and later, what it does, and what changes if you switch it.
Protect the data on the disk
1. Turn on FileVault
Privacy & Security → FileVault. Encrypts the whole startup disk. Without your login password (or the recovery key), nobody can read your files, even with the drive in another computer. On Apple silicon there is no noticeable speed cost. Store the recovery key somewhere safe that is not the Mac itself.
2. Require a password immediately after sleep
Lock Screen → Require password after screen saver begins or display is turned off → Immediately. A Mac left open in a café is only as safe as this delay.
3. Turn on the firewall
Network → Firewall. Blocks unsolicited incoming connections. It does nothing about what apps send out — see how to check which apps send data for that.
Share less with Apple and advertisers
4. Turn off Analytics & Improvements
Privacy & Security → Analytics & Improvements. Switch off Share Mac Analytics, Improve Siri & Dictation and Share with app developers.
5. Turn off personalised ads
Privacy & Security → Apple Advertising → Personalized Ads. Off stops Apple using your activity to target ads in the App Store, Apple News and Stocks.
6. Review Siri suggestions
Siri & Spotlight → Siri Suggestions and the per-app list below it. Siri learns from how you use each app; turn it off for apps whose content you consider private, such as Mail and Messages.
Control what apps can reach
7. Audit Location Services
Privacy & Security → Location Services. Remove any app that does not need your location. Under System Services → Details, turn off Significant Locations history if you do not want a log of places you visit.
8. Audit camera, microphone and screen recording
Privacy & Security → Camera / Microphone / Screen & System Audio Recording. Revoke anything you do not recognise or no longer use. An app with screen recording access can see everything on your display.
9. Audit Full Disk Access and Files & Folders
Privacy & Security → Full Disk Access and Files and Folders. Full Disk Access lets an app read almost everything, including Mail and Messages. Keep it for tools that genuinely need it — backup software, disk cleaners — and remove the rest.
10. Check Login Items
General → Login Items & Extensions. Every item under Allow in the Background can run without its app being open. Turn off anything you did not deliberately install.
Keep what you type and browse private
11. Use Safari’s privacy features
Safari → Settings → Privacy: turn on Prevent cross-site tracking and set Hide IP address to From Trackers. In Advanced, turn on Use advanced tracking and fingerprinting protection in all browsing.
12. Turn on Lockdown Mode if you are a target
Privacy & Security → Lockdown Mode. Designed for journalists, activists and anyone facing targeted attacks. It disables features that are commonly exploited, at the cost of some convenience. Most people do not need it; those who do, need it badly.
After the checklist
Settings control macOS. The apps you install are the other half: an app can still upload what it reads, whatever System Settings says. Prefer apps that publish exactly what they send — every SecureMacApps app does, and the list is five requests long.
Questions this answers
What is the most important privacy setting on a Mac?
Turning on FileVault, which encrypts the whole disk so nobody can read your files without your password, even with the drive removed. It is in System Settings → Privacy & Security → FileVault.
Should I turn off Analytics & Improvements on my Mac?
If you prefer not to send Apple diagnostic and usage data, yes. It does not affect how your Mac works. Go to System Settings → Privacy & Security → Analytics & Improvements and turn off each option.