Network Security · October 18, 2026 · ComputerKing Team

Don't Hand Out Mac Full Disk Access Carelessly! Apple Is Tightening It Because of AI Agents — Check Which Apps Can See Your Whole Mac Now

On October 2, Apple announced it will tighten macOS Full Disk Access because of AI agents: granting it will require very explicit user action. Apple gave no effective date and said nothing about existing grants. 3-minute checklist: see which apps already hold the keys to your whole Mac.

What happened: on October 2, Apple announced it will tighten Full Disk Access because of AI agents

On October 2, Apple announced on its developer news site that it will introduce additional controls for macOS Full Disk Access: in future, users will only be able to grant this level of access "with very explicit user action".

Apple's reasoning, in essence: some developers use Full Disk Access in ways that could put users at risk, exposing everything on their systems — including files, mail, messages and even browsing history — without users' full knowledge and understanding. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.

Apple gave no date for when the new controls take effect, and said nothing about what happens to permissions already granted — so check your existing grants yourself instead of waiting.

What is Full Disk Access, and why is it so powerful?

Full Disk Access exists so backup apps can work: backing up a whole Mac means bypassing the per-folder consent prompts macOS normally shows.

Once granted, an app can read files across the whole machine, Mail, Messages, Safari, Home, Time Machine backups and some administrative settings. Apple specifically warns that for communication apps, this "can also compromise the privacy of the people users are communicating with."

Here is the problem: the apps that used to hold this permission were mostly backup and security tools with fixed, predictable behaviour. AI agents are different — a model decides which files to open, so behaviour is hard to predict. Give one full-disk access and you have handed it the keys to the whole machine.

Why this blew up now: a disputed incident, with both sides stated

Reports say a columnist claimed that Meta's AI agent Muse synced a large volume of his Mac message history even though he had declined Messages access during setup. Meta disputes this, saying users must enable both Full Disk Access and the Messages connector before Muse can read any messages. Which side is right is currently unresolved.

On the other side, OpenAI's Dots has also been named as an example of an agent that asks for broad access to the computer.

The point is not which company is right or wrong. The point is that the permission itself is extremely powerful — don't decide based on "the app asked me to turn it on, so I did".

Do it now: the 3-minute checklist

1. Open Settings and look at the grant list: System Settings → Privacy & Security → Full Disk Access. Go through which apps already hold the permission.

2. Keep only what genuinely needs it: Time Machine / backup software and antivirus / security tools are usually reasonable. AI agents, communication apps and tools you rarely use should be removed unless there is a clear reason.

3. Test after removing: backup software without Full Disk Access cannot back up fully — think before removing it. An AI agent may lose some features — that is exactly the trade-off: features vs privacy.

4. Company Macs: ask IT first: a company Mac may be governed by management policies — don't change security settings on your own. Ask IT whether the company has a unified policy.

5. From now on, whenever an app asks for Full Disk Access, pause and ask three questions: why does it need the whole machine? Would one folder be enough? What happens if I say no? If it can't answer, don't grant it.

Don't misunderstand: this is not "never grant anything"

Backup software without Full Disk Access cannot back up completely — the permission itself is not evil. The problem is granting it carelessly. The principle is least privilege: an app gets the permissions it genuinely needs, nothing more, not everything at once for convenience.

How we can help

ComputerKing offers:

• 🔒 Mac privacy settings check: go through the Full Disk Access list item by item, removing grants that are not needed
• 💾 Backup setup: Time Machine + external drive, full backups without handing out permissions carelessly
• 🏢 Company Mac permission review: help SMEs check which apps hold excessive permissions and set a sensible policy

📞 WhatsApp 2115 9219 to book, or visit us at Room 1209, 18 On Lai Street, Shek Mun, Sha Tin (Dalit Plaza).

*Last updated: October 18, 2026. Written by the ComputerKing Team. Apple's announcement follows the text on Apple's developer news site; both sides of the disputed incident are quoted without adjudication.*