Many people believe Macs “don't get viruses”. That's not true: there is malware for macOS, especially programs that steal passwords and browser data, and it usually comes from fake downloads or “cracks”.
macOS has strong protections (Gatekeeper, XProtect, FileVault, the firewall), but some of them need to be checked or turned on. Your Apple Account needs the same protection as on an iPhone.
The menu paths here are for recent versions of macOS with System Settings. In older versions it's called System Preferences and the menus are slightly different.
⚙️ Step-by-step settings
Menu names may differ slightly depending on the model and version.
Update macOS and your apps
Apple regularly closes security holes that are used in attacks.
- Apple menu (the apple logo, top left) → System Settings.
- General → Software Update.
- Install the available updates.
- Click the ⓘ icon next to Automatic Updates and turn on all the options, especially Install Security Responses and system files.
- Update apps from the App Store → Updates; update programs from outside the App Store through the program's own menu.
- If your Mac no longer gets the latest version of macOS, check whether it still gets security updates.
Strong password, Touch ID and automatic lock
Protects access to your Mac when you leave your desk or if your laptop goes missing.
- System Settings → Users & Groups → check that every user has a password.
- System Settings → Touch ID & Password → add your fingerprint (if your Mac has Touch ID).
- System Settings → Lock Screen → Require password after screen saver begins or display is turned off → Immediately.
- In the same place, set the display to turn off after 5–10 minutes of inactivity.
- In Users & Groups → Automatically log in as → Off (turn off automatic login).
- Learn the shortcut Control + Command + Q to lock the screen instantly.
Turn on FileVault (disk encryption)
Without your password, the data on the disk can't be read if your Mac is stolen.
- System Settings → Privacy & Security.
- Scroll down to FileVault → Turn On.
- Choose how to recover access: through your iCloud account or with a recovery key.
- If you choose a recovery key, write it down and keep it somewhere safe – without it, your data could be lost forever.
- Keep your Mac plugged in until encryption has finished.
Check Gatekeeper and the firewall
Gatekeeper stops programs from unknown sources from opening; the firewall blocks unwanted connections.
- System Settings → Privacy & Security → Security → Allow applications from → choose App Store and identified developers (or App Store only for children).
- If macOS says a program “can't be opened” or “may be harmful”, don't get around the warning – delete the program.
- System Settings → Network → Firewall → turn it on.
- Under Options you can turn on Enable stealth mode.
- Don't enter your administrator password when a program you've just downloaded from an unknown website asks for it.
Check privacy permissions
Programs with access to your screen, camera or “Full Disk Access” can see everything.
- System Settings → Privacy & Security.
- Open Camera, Microphone, Screen & System Audio Recording, Accessibility and Full Disk Access one by one.
- Turn off any program you don't recognise or that doesn't need access.
- Also check System Settings → General → Login Items & Extensions and remove unknown programs that open by themselves.
- A green or orange dot in the menu bar at the top shows that the camera or microphone is in use.
Turn on Find My Mac and protect your Apple Account
You can find, lock or erase your Mac remotely, and protect your account from strangers signing in.
- System Settings → your name (Apple Account) → iCloud → Find My Mac → turn it on.
- In the same place, under Sign-In & Security, check that Two-Factor Authentication is on.
- Check the list of devices on your account and remove any you don't recognise.
- Use the Passwords app for strong, different passwords.
Back up with Time Machine
A backup saves you from ransomware, a broken disk and mistakes.
- Connect an external drive.
- System Settings → General → Time Machine → Add Backup Disk.
- Choose the drive and turn on Encrypt Backup.
- Let Time Machine back up automatically; check the date of the last backup every now and then.
- For your most important documents, also use iCloud Drive (Desktop & Documents).
✅ Do / Don't
✅ Do this
- Keep automatic updates switched on, especially Security Responses.
- Turn on FileVault and keep the recovery key somewhere safe.
- Only allow programs from the App Store and identified developers.
- Create a separate standard account for children.
- Lock the screen every time you walk away.
- Back up with Time Machine.
- Check the permissions in Privacy & Security every now and then.
- Turn on two-factor authentication for your Apple Account.
❌ Don't do this
- Don't believe that “Macs don't get viruses”.
- Don't download “cracked” programs or “free” versions of paid programs.
- Don't bypass the Gatekeeper warning with right-click → Open for unknown programs.
- Don't enter your administrator password in windows that pop up unexpectedly.
- Don't copy and paste commands into Terminal from websites or videos that promise “fixes” or “free downloads”.
- Don't install “cleaners” or “antivirus” programs from online ads.
- Don't leave your Mac unlocked in public places.
- Don't share the administrator account with children.
👨👩👧 Parental controls on a Mac with Screen Time
On a Mac, parental controls are set up with Screen Time, linked to Apple's Family Sharing.
- Create a separate standard account for your child: System Settings → Users & Groups → Add User → Standard.
- Link the Mac account to your child's Apple Account, which is part of your Family group.
- From the parent's account: System Settings → Screen Time → choose your child from the menu at the top.
- Turn on Downtime and App Limits.
- In Content & Privacy: restrict adult websites, purchases and apps by age.
- In Communication Limits and Communication Safety: limit who your child communicates with and turn on warnings for sensitive images.
- Turn on Lock Screen Time Settings with a passcode that only the parent knows.
- In Family → Ask to Buy, so that every purchase needs approval.
Option names may differ slightly depending on the macOS version.
⚠️ Warning signs
- Your Safari/Chrome home page or search engine has changed by itself.
- Windows pop up asking for your administrator password without you knowing why.
- Unknown programs appear in Login Items or in the Applications folder.
- An unknown profile appears in System Settings → General → Device Management (or Profiles).
- The fan runs loudly and your Mac is slow for no reason.
- You get notifications that someone signed in to your Apple Account, or that your saved passwords have been used somewhere else.
🆘 If you get hacked
- Step 1: Disconnect your Mac from the internet and tell an adult.
- Step 2: From a safe device, change the passwords for your Apple Account, your email and the accounts saved in your browser.
- Step 3: Delete unknown programs from Applications, Login Items and your browser extensions; delete unknown profiles.
- Step 4: Restart your Mac and install all updates (XProtect automatically removes many known harmful programs).
- Step 5: If the problem continues, back up your personal files (not programs) and erase your Mac: System Settings → General → Transfer or Reset → Erase All Content and Settings.
- Step 6: After resetting, turn on two-factor authentication everywhere and check the devices linked to your accounts.
- Step 7: For stolen money, blackmail or threats, keep the evidence and report it to Kosovo Police on 192.
More help: Help & Reporting