Apple says it will add more controls around Full Disk Access in macOS. This permission can let an app read files, mail, messages and browser history, so giving it to a new assistant deserves more than a quick click.
Why Apple is changing it
Full Disk Access has a real job. Backup tools and other apps may need broad access to work. Apple says some developers use the permission in ways that can expose a whole Mac without people fully understanding what they approved.
Apple also points to AI agents. An agent can take actions through an app and keep working through a task. A wide permission therefore gives it a much bigger room to make a mistake or expose something private.
What changes today?
Apple says additional controls are coming and that people will need to take a very clear action before granting this level of access. The announcement does not give a release date or show the final prompts. Think of it as a warning about the direction of macOS, not a new switch you can turn on today.
A quick privacy check
- Open System Settings → Privacy & Security → Full Disk Access.
- Read the list. Turn off access for an app you no longer use or do not recognise. Keep in mind that a backup app may need it for a reason you chose.
- When an AI tool asks for broad access, ask what it needs and whether a selected file or folder will do. Install it from the developer's official site, and do not give it passwords just to get past a prompt.
AI can be helpful without holding the keys to your whole computer. The safer default is simple: give an app the smallest access that lets it do its job, then take that access back when the job is over.
Image note: The lead image is an AI-generated editorial photograph of a closed, generic laptop on an everyday desk; it is not a macOS screenshot or a specific product photo.
