How to make your Mac private and secure

MacOS allows multiple user accounts to be set up on a single Mac. That’s a real convenience, especially if you share a machine with family members or colleagues.

However, all user accounts aren’t the same, and there’s one step you should take to limit access to your Mac’s settings: Make sure you only have one administrator account. Administrator accounts, as opposed to regular accounts, can do anything on a Mac. They can manage other user accounts, including changing their passwords. They can install software and change all system settings, including security and privacy settings.

You only need one account with that level of control. In fact, it’s not a bad idea to create a separate account just for administrative purposes. That account should have some name other than “admin” or “administrator” to make it more difficult for a hacker to guess the username, too.

Step 1: To change an account’s security level, open System preferences > Users and groups.

Step 2: To make any changes to an account, you will first need to unlock the account. Select Click the lock to make changes and then enter the password for the current account. Note that you’ll need to be using an administrator account to make these changes.

Step 3: Select the account that you want to enable or disable administrator privileges for. To enable administrator privileges, select Allow user to administer this computer. If the account already has administrator privileges and you want to remove them, then uncheck this setting.

Once you’ve finished, select Click the lock to prevent further changes.

Leaving your Mac unattended and logged in can present a security problem. That’s why it’s a good idea to make sure that your Mac locks itself after a period of time and requires logging in from sleep or when the screen saver is running.

MacOS has a firewall that can be turned on to protect incoming connections. The firewall is turned off by default.

Step 1: To turn on the firewall, open System Preferences then Security & Privacy. Select the Firewall tab and unlock the settings. Select Turn on Firewall.

Step 2: Select Firewall Options… to configure the firewall. You can disable all incoming connections except for basic internet services, automatically allow the built-in software to receive connections, automatically allow downloaded signed software to receive connections, and enable stealth mode to hide the Mac from test applications.

MacOS has built-in disk encryption, called FileVault, that makes it nearly impossible for someone to access your data without logging in to your Mac. If it’s not enabled by default, you should turn FileVault on as one of your first tasks when setting up your Mac.

Step 1: To turn FileVault on, open System Preferences and then Security & Privacy and select the FileVault tab. Select Turn on FileVault…

You will be presented with the option to either use your iCloud account to unlock your disk or create a recovery key. Using your iCloud account is more convenient and helps avoid the possibility of losing your recovery key.

Once you’ve set your options, select Continue.

Step 2: The disk will be encrypted and the progress reported in the window. Once it’s completed, you’ll receive a notification that a recovery key has been set and that encryption has finished.

You can allow various applications and services to access the built-in features and services in MacOS or disallow them for added privacy.

To configure your privacy settings, open System Preferences and Security and Privacy. Select the Privacy tab. Unlock the settings to make changes.

You’ll see a list of services on the left, and then a list of applications and services that can access each one on the right. You can allow or disallow access to each service as required.

You can install apps on your Mac from both the App Store and from third-party developers. MacOS lets you control whether third-party apps can be installed.

To allow or disallow third-party apps, open System Preferences and Security and Privacy. Unlock the settings to allow changes.

Under Allow apps downloaded from:, select either just the App Store or both the App Store and identified developers.

MacOS can automatically install various application and system updates, but that’s not enabled by default. Turning on automatic updates, particularly for security updates, helps keep your Mac protected from malicious actors.

Step 1: To turn on automatic updates, open System Preferences, then Software Update. Check Automatically keep my Mac up to date to turn on automatic updates. You will need to authenticate to make the change.

Step 2: You can specify which updates to automatically install by selecting Advanced…. You can configure MacOS to automatically check for updates, download new updates when available so that they’re ready to install, automatically install MacOS updates, automatically update apps installed from the App Store, and automatically install system data files and security updates.

At the very least, you should turn on automatic updates of system data files and security updates. These can arrive at any time and need to be installed as quickly as possible. Letting MacOS install them automatically means that they’ll be installed as soon as Apple makes them available.

Editors’ Recommendations