Mac Security & Care

A complete, step-by-step security routine for your MacBook, iMac, or Mac mini using built-in macOS defenses.

Digital Security Centre / Mac Security and Care

Follow this Mac route only

These steps are designed specifically for Apple Mac computers running modern versions of macOS. You do not need any third-party antivirus subscriptions. Keep your Mac plugged into its power charger before starting and save any open schoolwork or documents.

Menu check: In the very top-left corner of your screen, click the small Apple icon (). On modern Macs you will click System Settings. On older models, this same menu is named System Preferences. Both contain the exact same security protections.

Your protection in five layers

🔄
1. Updates
Fixes system bugs
🔑
2. Screen Lock
Stops snooping
🔐
3. Encryption
Scrambles hard drive
📦
4. App Safety
Blocks fake software
🗂️
5. Backups
Saves all documents

Each layer guards against a different danger. Together, they protect you if your Mac is ever misplaced, stolen, or exposed to a dangerous download.

1Keep macOS and apps updated

Updates are like free armor shields released by Apple engineers. They plug security holes so hackers cannot slip past your defenses. Running updates regularly is the single most important task for computer health.

Apple menu  → System Settings → General → Software Update
  1. Click the Apple logo: Click the small Apple icon () in the very top-left corner of your desktop, then click System Settings.
  2. Open Software Update: On the left side menu, click General, then click Software Update on the right. Your Mac will spin a small circle while checking Apple servers.
  3. Install available updates: If an update appears, click the blue button that says Update Now or Upgrade Now.
  4. Save your open files: If the update requires restarting, save your school projects and open browser tabs, then click Restart Now.
  5. Turn on automatic protection: Next to Automatic Updates, click the small information button (ℹ) and turn every toggle switch to ON. Especially ensure "Install Security Responses and system files" is active so Apple can patch emergency bugs automatically in the background.
How to update your App Store applications: Open your Mac's App Store from the Dock. Click Updates in the left sidebar, then click the blue Update All button at the top right.

2Lock your Mac and turn on FileVault

A computer left open on a desk is an open book. Locking the display stops anyone from reading your messages, while FileVault scrambles your hard drive files so they cannot be extracted even if the computer is dismantled.

A. Fast screen lock

Apple menu  → System Settings → Lock Screen
  1. Find the setting that says "Require password after screen saver begins or display is turned off".
  2. Click the dropdown menu and set it to Immediately.
  3. Set "Turn display off when inactive" to 5 Minutes on battery power.
  4. Keyboard Shortcut: Press Control + Command + Q together whenever you stand up to walk away. This locks your screen in one second.

B. Set up Touch ID

Apple menu  → System Settings → Touch ID & Password
  1. Click Add Fingerprint (type your Mac password when prompted).
  2. Rest your index finger or thumb lightly on the round top-right keyboard button. Lift and rest it repeatedly as the fingerprint diagram fills with red color.
  3. Turn ON the toggles for "Unlocking your Mac" and "Password Autofill".
  4. Never share your Mac master password; Touch ID is for quick unlocking, but your written password remains your primary recovery key.

C. Turn on FileVault disk encryption

Apple menu  → System Settings → Privacy & Security → FileVault
  1. Scroll down the Privacy & Security page until you locate the FileVault section.
  2. Click the button that says Turn On next to FileVault.
  3. You will be asked how to unlock your disk if you forget your password. Choose "Allow my iCloud account to unlock my disk" if you have a verified Apple ID with two-factor authentication, or choose "Create a recovery key".
  4. If you choose a recovery key, a long string of letters and numbers will appear. Write this down carefully on paper and store it in a private drawer. Never store it inside a text document on the same Mac!
  5. Keep your Mac connected to its charger while FileVault completes encryption in the background. You can continue doing your normal homework and browsing while it works.
Why FileVault matters: If a thief steals your laptop, they could plug it into another computer to copy your photos, documents, and browser histories. FileVault turns all your data into scrambled code that is impossible to read without your login password.

3Use trusted apps — and add an app lock when available

Only install software from the official Mac App Store or directly from the real manufacturer website. Beware of fake internet adverts promising to "speed up your Mac", "clean junk files", or "remove 3 viruses found now".

Safe download rules

  1. Whenever possible, open the blue App Store icon on your Mac to download apps because Apple inspects every single item first.
  2. If downloading from the web (such as Google Chrome, Zoom, or Minecraft), type the official address yourself. Double check the address bar before clicking download.
  3. Never double-click an installation file ending in .dmg or .pkg that arrived inside an unexpected email or message.
  4. Open Safari, click Safari > Settings > Extensions, and delete any extensions you did not personally install.

Verify app permissions in Gatekeeper

Apple menu  → System Settings → Privacy & Security
  1. Scroll down to the Security section.
  2. Under "Allow applications downloaded from", ensure App Store and identified developers is selected.
  3. If macOS blocks an unknown file with a yellow warning triangle, do not click Open Anyway unless a parent or IT teacher confirms it is genuine.
Important note regarding app locks: macOS provides system-level screen locks and Touch ID, but third-party desktop apps (like WhatsApp, Outlook, or banking portals) must provide their own separate app locks. Whenever available, open the individual app's settings and turn on "Require Touch ID / Password on launch".
How do I find an app's own lock setting?

Open the app on your Mac. Click the app's name in the very top-left menu bar (next to the Apple icon) and select Settings or Preferences. Look under Privacy, Security, or Account. Toggle on options like "Screen Lock" or "Require Touch ID after 1 minute". If the app does not have this setting, simply lock your Mac with Control + Command + Q whenever you step away.

4Review privacy permissions

Just like apps on your smartphone, desktop Mac programs must ask for your permission before turning on your camera, listening to your microphone, or reading your private files. Periodically audit these permissions to keep rogue software out.

Apple menu  → System Settings → Privacy & Security
  1. Check Camera access: Click Camera in the list. Review the apps shown on screen. If you see a game, utility tool, or unfamiliar program with permission turned ON, toggle the switch OFF. Only video-calling apps like FaceTime or Zoom should have camera access.
  2. Check Microphone access: Click Microphone and switch off access for any app that does not strictly require voice recording.
  3. Check Location Services: Click Location Services. Turn off access for any program that does not need your physical geographical position.
  4. Check Full Disk Access: Click Full Disk Access. This powerful permission should only belong to trusted backup tools like Time Machine. Remove unknown programs from this list.
Signing into websites on your Mac: Always keep your registered mobile phone nearby on your desk. When a site asks for 2FA, open Google Authenticator or Microsoft Authenticator on your phone, read the rolling six-digit code, and type it into the browser window you opened yourself. Never read these codes aloud to anyone on a phone call.

5Keep your Mac tidy without risky cleaner apps

Many internet ads claim your Mac is full of junk and urge you to install "free cleanup tools". Never install these apps! They frequently install adware, steal system data, and slow down your computer. Your Mac already has an official, safe storage cleanup tool built right into macOS.

Apple menu  → System Settings → General → Storage
  1. Click Storage and wait a few seconds while the colored bar measures your internal drive.
  2. Under Applications, click the small information button (ℹ). Look through the list and select apps you have not used in months, then click Delete.
  3. Under Documents, click the information button (ℹ) and review the Large Files tab. Delete old movie files or downloaded video projects you no longer need.
  4. Open your Downloads folder in Finder. Delete old installers, duplicate school worksheets, and temporary setup files.
  5. Right-click the Bin icon in your Dock and select Empty Bin to permanently reclaim your free space.
Beware fake virus pop-ups: If a webpage suddenly beeps and shows a message saying "Apple Security Alert: 3 Viruses Detected on your Mac! Call 0800-XXX-XXXX", it is a complete lie. Websites cannot scan your computer drive. Close the tab immediately. If it will not close, press Command + Option + Escape, click your browser, and click Force Quit.

6Back up with Time Machine and iCloud

A backup is an exact safety duplicate of all your documents, pictures, and coursework. If you accidentally delete an important presentation or spill water across your keyboard, a backup ensures not a single file is lost.

A. Time Machine (External hard drive)

Apple menu  → System Settings → General → Time Machine
  1. Plug an external USB portable hard drive into your Mac.
  2. Click Add Backup Disk.
  3. Click the name of your external drive and click Set Up Disk.
  4. Choose Encrypt Backup and create a password for the drive.
  5. Time Machine will now take automatic hourly backups whenever the drive is connected. Leave it plugged in during your homework sessions.

B. iCloud Drive (Cloud sync)

Apple menu  → System Settings → [Your Name] → iCloud
  1. Click on iCloud, then click on iCloud Drive.
  2. Turn ON the option for Desktop & Documents Folders.
  3. Every document placed on your Mac desktop will automatically synchronize with your Apple ID so you can view it from an iPhone or iPad as well.
  4. Always test your backup by opening a file from your external drive or iCloud to ensure it opens properly.
The 3-2-1 backup principle: Keep your files in 3 places: on your Mac, on an external Time Machine hard drive, and in the cloud with iCloud. This guarantees total peace of mind.

Your easy Mac checklist

Every week: Check for macOS updates and App Store patches.
Every time you walk away: Press Control + Command + Q to lock.
Once today: Turn on FileVault and store your recovery key safely.
Before downloading: Stick to the App Store or official company sites.
Every term: Audit Privacy permissions for Camera and Microphone.
Regularly: Plug in your Time Machine drive to make a backup.
Situation Do this first Never do this
Loud web popup says "Mac infected!" Force quit browser (Command + Option + Esc) Never call the phone number or pay for their cleaner
Leaving your desk at school or library Press Control + Command + Q to lock immediately Never leave your laptop screen open and unattended
Unexpected 2FA prompt appears on phone Tap Deny / Reject immediately Never approve an alert you did not initiate yourself