Appearance
Security Essentials
| Setting | Where | Why |
|---|---|---|
| FileVault | System Settings > Privacy & Security > FileVault | Encrypts your entire drive. If your Mac is lost or stolen, nobody can read your data. |
| Firewall | System Settings > Network > Firewall | Blocks unwanted incoming connections. |
| Find My Mac | System Settings > [Your Name] > Find My | Locate, lock, or erase your Mac remotely if lost. |
| Lock Screen | System Settings > Lock Screen | Set "Require password after screen saver begins" to "Immediately." |
| Automatic Updates | System Settings > General > Software Update > Automatic Updates | Keep all options on. Security patches are critical. |
Email Safety
- Don't click links in unexpected emails: hover to preview the URL first
- Check the sender address carefully (
paypal-security@scam.comis not PayPal) - Apple will never email you asking for your password or credit card
- Use Mail Privacy Protection: Mail > Settings > Privacy > Protect Mail Activity
Security: Mac vs Windows Comparison
If you manage security on both platforms, here's how the concepts map:
| Security Feature | Mac | Windows |
|---|---|---|
| Full disk encryption | FileVault (XTS-AES-128) | BitLocker (XTS-AES-128/256) |
| Biometric login | Touch ID | Windows Hello (face + fingerprint) |
| Firewall | Built-in (System Settings) | Windows Defender Firewall |
| Malware protection | XProtect + Gatekeeper | Windows Defender |
| Device tracking | Find My Mac | Find My Device |
| App sandboxing | App Store apps sandboxed | Microsoft Store apps sandboxed |
| Password manager | iCloud Keychain / Passwords app | Windows Credential Manager |
| 2FA codes | Passwords app | Microsoft Authenticator |
| VPN | Built-in L2TP/IKEv2 | Built-in L2TP/IKEv2/SSTP |
Cross-Platform Password Sync
If you need the same passwords on both:
- iCloud for Windows: installs a Chrome/Edge extension that autofills your iCloud Keychain passwords on Windows
- Bitwarden or 1Password: works natively on both platforms with browser extensions
- Microsoft Authenticator: syncs 2FA codes across iOS and Android (not directly to Mac desktop, but accessible from your phone)
See Passwords Cross-Platform for the full authentication and password setup.
Security Checklist
Use this to audit your Mac's security:
- [ ] FileVault enabled
- [ ] Firewall enabled
- [ ] Find My Mac enabled
- [ ] Lock screen requires password immediately
- [ ] Automatic updates enabled
- [ ] Apple Account has 2FA
- [ ] Using a password manager
- [ ] Privacy permissions reviewed
- [ ] Safari tracking prevention on
- [ ] Screen lock shortcut memorized (
Ctrl + Cmd + Q) - [ ] iCloud Passwords extension installed on Windows (if using both platforms)
- [ ] Same password manager on both Mac and PC