Apple is putting a new lock on macOS Full Disk Access, the one Mac permission that can hand an app nearly everything you own: files, mail, messages, and browsing history. In an October 2 developer note, Apple said AI agents are the reason, and that granting this access will soon take “very explicit user action.” You don’t have to wait, though. You can check which apps already have it in about a minute.
Here’s the short version before we get into it:
- What changed: Apple announced stricter controls for Full Disk Access on the Mac on October 2, 2026.
- Why: AI agents that ask for this permission during setup, which Apple says puts users at risk.
- When: No date or macOS version yet. Apple only said “going forward.”
- Who it affects: Anyone running AI agent apps, backup tools, or security software on a Mac.
- What you can do now: Review the list in System Settings and switch off anything you don’t recognize.
The fix you can do today matters more than the one Apple is planning, so stick around for the steps below.
What Apple Actually Said About Full Disk Access
Apple published the change as a short post on its developer news site. It’s unusually blunt for Apple. The company says some developers are using Full Disk Access “in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding.”
Apple also points out that the permission largely sidesteps the normal privacy controls. It exists mainly so backup apps can copy your whole drive. Using it for anything else was always a bit of a shortcut.
The key line is about the future. “As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially,” Apple wrote. In plain English: an agent that can read everything and act on its own is a much bigger risk than an old backup tool.
Why AI Agents Pushed Apple to Act Now
The timing isn’t random. A new wave of always-on assistants has landed on the Mac this fall. According to 9to5Mac, agents like Meta Muse and OpenAI’s Dots request Full Disk Access when you set them up.
We covered what these tools do in our look at OpenAI Dots and its $100-a-month price and our breakdown of the Meta Muse AI agent. Both promise to handle email, plans, and tasks for you. To do that well, they want to see a lot.
The problem is the setup screen. Most people click “Allow” without thinking, because the app won’t work otherwise. Apple also flagged a second issue: for chat apps, your access exposes the private messages of the people you talk to, and they never agreed to anything.
How Full Disk Access Compares to Other Mac Permissions
Not every Mac permission is equally risky. This table shows where Full Disk Access sits next to the other prompts you’ll see in Privacy & Security settings.
| Permission | What the app can reach | Who usually needs it |
|---|---|---|
| Full Disk Access | Almost everything, including Mail, Messages, and Safari data | Backup apps, antivirus, some admin tools |
| Files and Folders | Only specific folders, like Desktop, Documents, or Downloads | Editors, file managers, cloud sync apps |
| Accessibility | Control of your mouse, keyboard, and other apps | Window managers, automation tools, agents that click for you |
| Screen Recording | Everything shown on your screen | Video calls, screenshot tools, screen-reading AI |
Full Disk Access is the only one that opens your private data stores in one go. That’s why Apple is starting here.
How to Check macOS Full Disk Access on Your Mac Right Now
This takes about a minute, and it works on any recent version of macOS. Follow these steps:
- Open the Apple menu and choose System Settings.
- Click Privacy & Security in the sidebar.
- Scroll down and click Full Disk Access.
- Look through the list. Turn off the switch next to any app you don’t use or don’t trust.
- To remove an app completely, select it and click the minus (–) button.
A good rule: if it isn’t a backup tool or security software you installed on purpose, ask why it needs this. Many apps work fine with narrower permissions.
Turning access off can break an app’s features. If an agent suddenly can’t find your emails, that’s the permission working. You can always switch it back on later.
When the New Rules Arrive, and What Stays Unclear
Apple hasn’t given a date or named a macOS version. Cult of Mac expects the changes in macOS 27.1 or 27.2, but that’s an estimate, not an Apple promise. If you’re still catching up on this year’s release, our macOS 27 Golden Gate guide covers what’s already shipped.
We also don’t know what “very explicit user action” will look like. It could be an extra warning, a trip into System Settings, or a password prompt. Apple’s wording suggests a single “Allow” click won’t be enough anymore.
For developers of AI agents on Mac, the message is clear. Ask only for what the app needs, and explain why. Apps built around blanket access may need a redesign.
Frequently Asked Questions
What is Full Disk Access on a Mac?
It’s a macOS permission that lets an app read nearly all data on your Mac, including Mail, Messages, and Safari history. Apple says it exists mainly so backup apps can work.
Is it safe to give an AI agent Full Disk Access?
It’s risky, because the agent can read private data and act on it without asking each time. Grant it only to apps you fully trust, and only if narrower permissions won’t do the job.
Will my apps stop working when Apple changes the rules?
Apple hasn’t said existing permissions will be revoked. The announced change is about making it harder to grant access, so expect an extra confirmation step rather than broken apps.
Does this change affect iPhone or iPad?
No. Full Disk Access is a Mac-only permission, and Apple’s note only mentions macOS.
The Bottom Line
Apple is right to slow this down, and you shouldn’t wait for it. AI agents are useful, but handing one the keys to your whole Mac because a setup screen asked nicely is a bad trade. Open Privacy & Security today, prune the Full Disk Access list down to your backup and security tools, and make every agent earn its access the hard way.
Leave a Reply