Skip to content

Security Essentials

SettingWhereWhy
FileVaultSystem Settings > Privacy & Security > FileVaultEncrypts your entire drive. If your Mac is lost or stolen, nobody can read your data.
FirewallSystem Settings > Network > FirewallBlocks unwanted incoming connections.
Find My MacSystem Settings > [Your Name] > Find MyLocate, lock, or erase your Mac remotely if lost.
Lock ScreenSystem Settings > Lock ScreenSet "Require password after screen saver begins" to "Immediately."
Automatic UpdatesSystem Settings > General > Software Update > Automatic UpdatesKeep all options on. Security patches are critical.

Email Safety

  • Don't click links in unexpected emails: hover to preview the URL first
  • Check the sender address carefully (paypal-security@scam.com is not PayPal)
  • Apple will never email you asking for your password or credit card
  • Use Mail Privacy Protection: Mail > Settings > Privacy > Protect Mail Activity

Security: Mac vs Windows Comparison

If you manage security on both platforms, here's how the concepts map:

Security FeatureMacWindows
Full disk encryptionFileVault (XTS-AES-128)BitLocker (XTS-AES-128/256)
Biometric loginTouch IDWindows Hello (face + fingerprint)
FirewallBuilt-in (System Settings)Windows Defender Firewall
Malware protectionXProtect + GatekeeperWindows Defender
Device trackingFind My MacFind My Device
App sandboxingApp Store apps sandboxedMicrosoft Store apps sandboxed
Password manageriCloud Keychain / Passwords appWindows Credential Manager
2FA codesPasswords appMicrosoft Authenticator
VPNBuilt-in L2TP/IKEv2Built-in L2TP/IKEv2/SSTP

Cross-Platform Password Sync

If you need the same passwords on both:

  1. iCloud for Windows: installs a Chrome/Edge extension that autofills your iCloud Keychain passwords on Windows
  2. Bitwarden or 1Password: works natively on both platforms with browser extensions
  3. Microsoft Authenticator: syncs 2FA codes across iOS and Android (not directly to Mac desktop, but accessible from your phone)

See Passwords Cross-Platform for the full authentication and password setup.

Security Checklist

Use this to audit your Mac's security:

  • [ ] FileVault enabled
  • [ ] Firewall enabled
  • [ ] Find My Mac enabled
  • [ ] Lock screen requires password immediately
  • [ ] Automatic updates enabled
  • [ ] Apple Account has 2FA
  • [ ] Using a password manager
  • [ ] Privacy permissions reviewed
  • [ ] Safari tracking prevention on
  • [ ] Screen lock shortcut memorized (Ctrl + Cmd + Q)
  • [ ] iCloud Passwords extension installed on Windows (if using both platforms)
  • [ ] Same password manager on both Mac and PC