Key takeaways
- Full Disk Access is the broadest permission a Mac app can get: Apple says it covers data from Mail, Messages, Safari and Home, plus Time Machine backups.
- You can see every app that holds it under Apple menu > System Settings > Privacy & Security > Full Disk Access.
- Backup tools are the main apps with a real need for it; for anything else, switch it off and see whether the app still does its job.
- On October 2, 2026 Apple said it will add extra controls so this permission is granted only through very explicit action, but it gave no date.
Full Disk Access is the one Mac permission that hands an app nearly everything: your mail, your messages, your browsing history and your backups. Checking which apps have it takes about a minute, and Apple has just said it plans to make the permission harder to grant by accident.
What is Full Disk Access on a Mac?
It is a setting in macOS that lets an app read files across your whole Mac, not just the folders you point it at. Apple’s own user guide says it includes data that belongs to other apps, such as Mail, Messages, Safari and Home, as well as Time Machine backups and some administrative settings that apply to every user on the machine.
Most Mac permissions are narrow. An app asks for the camera, or your contacts, or one folder, and macOS shows you a prompt explaining what it wants. Apple calls this system Transparency, Consent and Control. Full Disk Access sits above all of that. Apple describes it as a way to largely bypass the normal privacy controls, and says it exists so that backup software can do its job properly.
Patrick Wardle, a well-known macOS security researcher, put the practical meaning bluntly when Ars Technica asked him: with this permission, “any (non-root file) is readable, browsing history, browser cookies, chats.”
How do I see which apps have Full Disk Access?
Open the list in System Settings. On current versions of macOS:
- Click the Apple menu and choose System Settings.
- Click Privacy & Security in the sidebar.
- Scroll to Full Disk Access and click it.
You will see every app that has asked for the permission, each with a switch. An app with its switch turned on can read the whole disk. An app listed with the switch off asked at some point but does not have access now.
Some changes in this part of System Settings need an administrator account, so if the switches will not move, sign in as an admin or ask whoever manages the Mac.
Which apps actually need it?
Fewer than you might think. Apple’s own explanation for the permission is backup software, which has to read everything in order to copy everything. A backup tool without it will quietly skip files you care about.
For any other app on the list, ask one question: does this app’s job require reading my entire Mac? A note-taking app, a chat app or an AI assistant usually works on the files you give it. If you cannot think of a clear reason an app needs the whole disk, treat the permission as something to remove.
The quickest test is practical. Switch the app off, use it normally for a few days, and see whether anything breaks. If it does, you can switch it back on in the same place.
How do I turn Full Disk Access off for an app?
In the same Full Disk Access list, turn the switch next to the app off. macOS may ask for your password and may ask you to quit and reopen the app before the change takes effect.
To give access to an app that is not on the list, Apple’s instructions are to click the add button under the list, choose the app, then click Open. Only do this for software you trust and that clearly needs it, such as your backup tool.
If you remove an app from your Mac entirely, check the list afterwards. Leftover entries are harmless once the app is gone, but a tidy list makes the next check faster.
Why is Apple changing this permission now?
Because AI agents raise the stakes. On October 2, 2026, Apple published a post on its developer news site saying it will add additional controls around Full Disk Access, according to reports from MacRumors, 9to5Mac, TechCrunch and PCMag.
Apple’s stated reasons:
- Some apps use the permission riskily, reaching files, mail, messages and browsing history that their users never knowingly handed over.
- For apps you use to talk to other people, this access can also expose the privacy of the people on the other end of the conversation.
- The risk will grow considerably as AI agents become more capable and act more on their own.
Apple says the goal is that anyone who really wants to grant this access can do so only through very explicit user action. It did not say when the new controls will arrive or what they will look like. TechCrunch added a correction to its first report to make clear the change is about informed consent, not a new limit on what apps can do once you have granted access.
Our read: an AI assistant that can read your whole disk can also act on what it reads, and it does so without asking you each time. That is a bigger exposure than a backup tool that only copies files. Reviewing the list now costs nothing and does not depend on Apple’s timeline. For more on how these tools work, see what “agentic AI” really means.
What should businesses do?
Treat Full Disk Access as part of your access review, alongside admin accounts and shared passwords. On company Macs, Apple’s platform documentation notes that a device management service can switch off privacy permissions such as this one for specific apps, but it cannot switch them on on the user’s behalf. That makes it a useful tool for blocking the permission across a fleet.
Three practical steps:
- Write down which apps are allowed it, usually your backup and security tools, and check staff Macs against that list.
- Ask before installing AI desktop assistants. Find out what permissions the tool requests and why, before it reaches client files.
- Include it in your security answers. Cyber insurers now ask detailed questions about access controls; see what cyber insurers now require from small businesses.
If you would rather keep sensitive documents away from cloud AI tools altogether, running a private AI assistant on your own PC is an option. And because backup apps are the main legitimate holders of this permission, it is a good moment to confirm yours is working; our backup setup guide covers how.
What we don’t know yet
Apple has not said which version of macOS will bring the new controls, how the extra step will work, or whether apps that already have Full Disk Access will need to ask again. Until Apple publishes details, the list in System Settings is the control you have, and it already works.
Frequently asked questions
Is Full Disk Access dangerous?
Not by itself. It is risky when an app that does not need it has it, because that app can read data belonging to your other apps, including mail and messages.
Does my backup app need Full Disk Access?
Usually yes. Apple says the permission exists so backup software can work properly, and without it a backup tool may skip protected files.
Will turning off Full Disk Access delete anything?
No. It only stops the app from reading protected locations. Your files stay where they are, and you can switch the permission back on at any time.
When will Apple's new Full Disk Access controls arrive?
Apple has not said. Its October 2, 2026 announcement gave no date and no details of how the controls will look.
Get the next one in your inbox. One email a day with the tech stories that matter, explained in plain English. Subscribe free.
Sources
This article was compiled from reporting by the following outlets. Links go to the original reports.
- MacRumors: Apple Announces 'Full Disk Access' Changes on macOS Due to AI Agents
- 9to5Mac: Apple says it’s tightening macOS privacy controls amid the rise of AI agents
- TechCrunch: Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
- PCMag: Amid AI Agent Fears, Apple Restricts Full Disk Access
- Apple Support (Mac User Guide): Change Privacy & Security settings on Mac
- Apple Platform Support: App privacy access settings