Mac Security Guide

Anyone who spends any time on the internet needs to think about cybersecurity. That includes Mac owners. Mac security was considered unnecessary for a long time because Macs didn’t tend to get viruses, but things are much different today. Security threats against Apple computers have increased massively, and Mac owners need to think seriously about protecting themselves and their valuable data from criminals.  

Before we start

 

MacKeeper’s trusted Antivirus tool helps protect your personal information by checking your device for threats in real time and empowering you to eliminate them immediately. Provide your MacBook the best protection against viruses and malware with MacKeeper’s Antivirus tool. Here’s how:

1. Download MacKeeper on your MacBook Pro, Air, or desktop.
2. Select Antivirus from the sidebar and click Enable in the real-time protection box.
3. Click the Start Scan button to start checking for threats, and click Move to Quarantine to remove them after the scan concludes.

If you’re unsure about what cybersecurity measures to take, this macOS security guide is for you. We’ll cover everything you need to know how to secure your Mac, from built-in Privacy and Security settings to third-party software.  

How good is Mac security?

To its credit, Apple regularly releases security updates for macOS, which help prevent criminals from using flaws in the code to attack users. It also keeps a tight leash on who can release apps in the App Store, so rogue apps are unlikely to find their way there.  

macOS security features include Gatekeeper, which makes sure only software from trusted sources runs on your Mac. When you try to run or install software from outside the App Store, Gatekeeper will step in to verify it, and you’ll get the choice whether to proceed or not.

XProtect is another macOS security feature that includes a firewall and a basic antivirus. XProtect on Mac aims to detect and block malware from running.  

Many Macs have hardware-level security, too. From 2018 to 2020, Intel-based Macs included the T2 Security Chip, which provides security features like encryption and secure boot. Unfortunately, this chip has been found to have an ‘unfixable’ flaw—called the Checkm8 vulnerability—which gains deep access into macOS by bypassing the chip. M1 Macs, however, don’t have this issue, so they are considered more secure.

Are Apple computers more secure than Windows? When MacBooks were still in the niche, they weren’t a target like Windows PCs were. That’s changed as they’ve grown more popular. Mac ownership is more common, so cyber criminals see them as a more worthwhile target than they used to be. At one point, Apple felt comfortable claiming Macs don’t get viruses before it quietly ditched that idea around 2012. Quite simply, Macs can and do get viruses.

Does Mac have built-in security?

In addition to regular patching to keep it secure, macOS has built-in security features to protect its users. Some of them are more useful than others, but they’re all worth knowing about so you can make an informed choice about what to enable and what to leave turned off to avoid encountering issues.  

Mac’s built-in security features include:

• Firewall
• Basic antivirus
• iCloud Keychain
• Disk encryption
• Disabling automatic login
• Touch ID
• Encryption with FileVault
• Find My Mac
• Password-protected folders
• Blocking automatic downloads
• 2FA for your iCloud account
• Lockdown Mode
• Disabling Siri
• Screen lock after inactivity
• Backup copy
• Terminal secure keyboard entry

Security features in different macOS

macOS beefs up security with each release, including past releases such as Catalina, High Sierra, Mojave, and more.

Apple’s latest operating systems for Mac models include the following security features:

How to run security check on Mac

Unfortunately, Mac lacks a built-in function to assess your device's security level. This means you must turn to third-party tools to check your Mac’s security, especially if you’re unfamiliar with the signs that your MacBook is hacked or monitored.

MacKeeper’s Antivirus tool is the ultimate cyber security solution for Mac. It empowers you to check security on your Mac and notifies you if it finds threats, allowing you to eliminate them at the click of a button. Antivirus is a safe utility to complement your MacBook’s security and keep your personal information safe from hackers.

Here’s how to use it:

1. Download MacKeeper and take advantage of the 7-day free trial to test our Antivirus.
2. Choose the Antivirus option from the sidebar and hit the Enable button for real-time antivirus protection.
3. Hit the Start Scan button to initiate the scan.

Mac security best practices

Prioritizing your Mac’s security requires leveraging Mac’s built-in security and practicing safe habits. Here’s what you can do to keep your MacBook device secure:

1. Disable automatic login

By default, when you restart or turn on your Mac, it will ask you for your login details before allowing you to use macOS. With automatic login, you can avoid that, but anyone can then access your Mac.

How to disable automatic login on a Mac:

1. In System Settings, click Users & Groups in the sidebar.
2. Pick an account from the Automatically log in as menu.
3. Enter your account password to confirm your action.

Note: You cannot disable automatic login if your FileVault is enabled. The vault encrypts data to enforce your privacy and security.

2. Set up new users

Setting up users means restricting others from accessing your Mac and your files. If you give them their own login option, they can use your Mac, but they won’t have access to your data. This simple feature enables you to increase Mac security if you share your computer.  

Here’s how to set up users on your Mac:  

1. In System Settings, click Users & Groups, and select Add User.
2. You may be asked to enter your password.
3. Click on the New User pop-up menu, choose a type of user, such as Standard, enter the required information, and click the Create User button.

3. Keep everything updated

Software developers often release security patches to stop hackers from exploiting weaknesses in their code. That’s why keeping all your software up to date is so important. This basic Mac safety tip can make a huge difference, so if some of your apps aren’t being updated anymore, it might be time to update them manually via the App Store or replace them.  

Here’s how to check for updates in macOS:

1. In System Settings, click General > Software Update.
2. Wait while it checks for updates.
3. It will let you know if any updates are available. Click the Update Now button to initiate the update.

A heads up from MacKeeper: 

 

This will only look for macOS and Apple software updates. To update third-party apps manually with MacKeeper’s Update Tracker, open MacKeeper, select Update Tracker, check the list, and click Update.

4. Enable Touch ID

Anyone can access your private data if you are in a co-living situation or use your Mac in public spaces. For this reason, we recommend using a screen saver that can only be disabled with Touch ID.

Here’s how to set up Touch ID on your Mac:

1. In System Settings, select Touch ID & Password > Add Fingerprint.
2. Enter your password and follow the prompts to add fingerprints to your account.

5. Set up encryption with FileVault

Using FileVault, you can encrypt the data on your main disk so unauthorized users can’t access it. Any Mac with an Apple T2 or M1 chip already encrypts data by default, but FileVault can add further protection by requiring a password to decrypt data. To use FileVault, you need to have an administrator account, which you should have if you’re the owner of the Mac you’re using. You’ll find FileVault in your Mac security settings.  

Here’s how to set up FileVault on a Mac:

1. In System Settings, select Privacy & Security.
2. Scroll down to Security and click FileVault on the right.
3. Hit the Turn On button and enter your password if prompted to do so.
4. Choose an option to unlock your disk and reset your login password if you forget it, and select Continue.

6. Set up Find My Mac

Mac’s Find My Mac feature helps you locate a lost Mac or wipe it remotely if you suspect you won’t recover it.

Here’s how to set up Find My on a Mac:

1. In System Settings, click on your name > iCloud > Show More Apps in the lower-right corner of the window.
2. Look for Find My Mac on the list of apps and click on it.
3. Ensure that both Find My Mac and Find My network are On, and hit Done.
4. Enable Apple’s Location Services feature if you want to locate your lost MacBook on a map. You can do this by selecting Privacy & Security > Location Services in System Settings. Click Details next to System Services and ensure the Location Services option is enabled for Find My.

7. Enable the firewall

Although macOS contains a firewall, it’s not enabled by default. So, you need to turn it on to control what incoming connections are allowed.

Here’s how to enable the macOS firewall:

1. From System Settings, select Network > Firewall.
2. Enable Firewall by toggling the setting on (it should turn blue).
3. Click Options if you want to tweak the firewall settings.
4. Tweak Firewall settings and hit the OK button.

8. Limit apps to the App Store

Because Apple has total control over what apps get into the App Store, it’s a good way to provide security for Macintosh computers. You can avoid rogue software by allowing only App Store software to be installed on your Mac.  

How to limit apps to the Mac App Store:

1. In System Settings, select Privacy & Security.
2. Head to the Security section and select App Store under Allow applications downloaded from.

9. Tweak privacy settings

The Privacy section of your Mac’s security settings is essentially a permissions panel. Here, you can define which apps are able to do certain things, like access your Mac’s microphone or see your current location.

How to tweak Mac privacy settings:

1. Open System Settings and select the Privacy & Security option from the sidebar.
2. Click Advanced (it is located further down the page).
3. Set your preferences and click Done.

10. Turn off Wi-Fi and Bluetooth when you don't need them

Hackers and bad actors can compromise your device using your wireless connections, like Wi-Fi and Bluetooth. For this reason, it’s wise to disable both Wi-Fi and Bluetooth in unfamiliar or public settings, like restaurants and internet cafés.

Here’s how to turn off Wi-Fi and Bluetooth on your Mac:

1. To disable Wi-Fi, click the Wi-Fi icon located in the menu bar and toggle the setting off.
2. To disable Bluetooth, click the Bluetooth icon in the menu bar and disable the toggle.

11. Use Keychain Access to manage passwords

The more complex your passwords are, the harder they are to crack. Unfortunately, complex passwords are also more difficult to remember. Because you should never reuse passwords, it becomes even more difficult to keep track of what all your passwords and usernames are. Keychain Access can help with that by securely storing your passwords and allowing you to access them when you need to.  

You can find your stored passwords in the Keychain Access app, found in Applications > Utilities. You can also store your Keychain online in your iCloud to access it from other devices, including iPhones, iPads, and other Macs.  

How to set up iCloud Keychain on your Mac:

1. In System Settings, select your name and click on iCloud (choose Apple ID > iCloud in the sidebar of older macOS versions).
2. Selec the Passwords & Keychain option.
3. Toggle on Sync This Mac and click Done.

12. Protect folders with passwords

In your home, most items are stored in plain sight, while important items and documents are tucked away in a safe. You should treat your Mac items the same way. Password-protecting critical files keeps them away from curious minds and protects your privacy.

How to protect Mac folders with a password:

1. Launch Mac’s Disk Utility and click File > New Image > Image From Folder .
2. Select the target folder, hit Choose, pick a level of encryption, populate the password fields, and click Choose.
3. Now, delete the original folder, which is unprotected and redundant.

13. Prevent the browser from opening downloads automatically

Some file downloads can infect your Mac with malware and viruses, giving hackers access to your computer and personal information. To prevent this, you can block your browser from automatically opening downloads.

To stop your browser from automatically opening downloads and improve internet security for macOS, do this:

1. Open Safari from the Dock and select Safari > Settings > General.
2. Untick the Open “safe” files after downloading option.

14. Turn on 2FA in your iCloud account

Two-factor authentication (2FA) adds another layer of protection to your iCloud account, making it difficult for bad actors to breach it. Consider adding 2FA to increase your account’s security level.

How to enable 2FA on Mac:

1. In System Settings, click on Apple ID > Sign-in & Security.
2. Click Two-Factor Authentication.
3. Enter your phone number to receive your 2FA codes and click Done. Ensure it’s a number you have access to.

15. Use a physical security key

If you want even more protection, a physical security key may provide it. A physical security key is a form of Mac security hardware that prevents unauthorized users from bypassing your laptop, even if they know your password. Ensuring you can only physically unlock your Mac with the tool is a great solution for monitoring and controlling access.

16. Enable Lockdown Mode

Apple’s Lockdown Mode is designed for individuals who are prone to privacy and security violations. Such individuals’ macOS vulnerability to sophisticated attacks like mercenary spyware on Mac is high due to who they are or the work they do. Therefore, Lockdown Mode should be used in extreme cases.

Enable Lockdown Mode by following these steps:

1. On your device, open System Settings > Privacy & Security > Lockdown Mode (you may have to navigate further down).
2. Select the Turn On button next to Lockdown Mode.

17. Turn off Siri

As smart and helpful as Siri is, the assistant isn’t perfect and can share your personal information. For this reason, turning off Siri can help you avoid compromising your personal data.

To turn off Siri, do this:

1. Select Siri & Spotlight in System Settings.
2. Turn off Ask Siri by toggling it off on the right.

18. Enable screen lock after inactivity

Leaving your laptop open and active when not in use exposes your activity to anyone in your vicinity. If you’re handling sensitive information, it places your privacy at risk. To be safe, I recommend enabling a screen lock when your computer is inactive. Here’s how:

1. In System Settings, select Lock Screen from the sidebar.
2. Set the Require password after screen saver begins or display is turned off option to Immediately.

19. Create a backup copy

Even with multiple security measures in place, backing up important files can save you from a headache if your Mac is ever lost or stolen or your files become corrupted.

Follow the steps below to backup your Mac:

1. Connect an empty external hard drive to your Mac, ensuring it has enough storage.
2. Launch System Settings > General > Time Machine > Add Backup Disk, select your disk from the list, and follow the prompts.
3. Choose your external disc from the list in the pop-up window and click Set Up Disc.

20. Enable Terminal secure keyboard entry

Mac’s Terminal secure keyboard prevents your apps or network from recording your keystrokes in the Terminal app. Before you enable this feature, ensure your apps don’t require keystrokes from Terminal.

Take the following approach to enable Terminal secure keyboard entry on your Mac:

1. Launch the Terminal app (press the Command + space bar keys, enter Terminal in the search bar, and select Terminal—the first option on the list).
2. Click Terminal > Secure Keyboard Entry and ensure there’s a checkmark next to Secure Keyboard Entry.

21. Limit the number of administrative users

Mac’s administrative users have the freedom to modify user accounts and settings as they see fit. Giving multiple individuals that freedom can lead to security compromises for other users. Conversely, keeping administrative users to a minimum can help keep user accounts secure.

Do you need extra security on a Mac?

Yes, it’s best to get extra security for your Mac device if you care about your privacy and security. Check out the options described below for our recommendations.

Recommended security software for Mac

Your built-in Mac security can only protect you up to a point. The more layers of protection you have, the safer you’re likely to be. And third-party security developers are, of course, entirely dedicated to protecting Macs, so specialist Mac security software tends to be more effective than what you get with macOS.  

At the very least, you should have some kind of Mac antivirus installed. A third-party firewall isn’t strictly necessary, but it’s well worth having one anyway, especially as there are great free firewall apps. You might also want to consider a VPN service if you’re concerned about privacy.  

Third-party Mac antivirus recommendations

With Mac malware growing at a previously unprecedented pace, the market for Mac security tools has grown too. Big players in the antivirus market, like Bitdefender, now have dedicated Mac apps, while programs like MacKeeper focus on providing all-around protection and virus filtering for Macs. There are free antivirus apps like Avast Security for Mac owners on a budget. These are just some of the best antivirus apps for Mac, though; any of them will make a valuable addition to built-in Mac security and privacy features.  

Third-party Mac firewalls recommendations

If you want more control over incoming and outgoing network connections, a third-party firewall can make a big difference. Without a doubt, LittleSnitch is one of the best Mac firewalls around. It can alert you whenever an app wants to access the internet, and you can easily decide what it’s allowed to do. A good free alternative is Lulu, which offers the same basic functionality at no cost. It’s not quite as powerful in terms of custom rules, but it’s well worth checking out. Another good option is Radio Silence.

Third-party VPN apps for Mac recommendations

One of the best ways to protect your privacy is to use a virtual private network (VPN). Essentially, this routes all your internet traffic through your VPN provider’s servers, hiding your location and your private information in the process. There are tons of good dedicated VPN services with Mac apps, including ExpressVPN, CyberGhost, and SurfShark. If you have a MacKeeper subscription, though, you don’t need a separate VPN service—it comes with the Private Connect VPN built in.  

Final thoughts

Your Mac’s security should never be taken for granted, whether you use your MacBook for work or play. Use our handy macOS hardening guide to make your Mac more secure. For added security, installing an antivirus utility is critical. MacKeeper’s Antivirus tool regularly scans your Mac for viruses and malware and enables you to remove them with the click of a button.