Last updated: October 3, 2026

The quick answer

Apple announced on October 2, 2026 that it will make it harder for Mac apps to get Full Disk Access, the permission that lets an app read almost everything on your computer, citing the growing risks of autonomous AI agents. Nothing changes on your Mac yet and Apple has not given a date, but you can and should check today which apps already have this access and switch it off for any that do not truly need it.

What happened

In a short post on its developer news site titled “Updates to Full Disk Access in macOS,” Apple said it plans to add new controls around one of the most powerful permissions on the Mac. Full Disk Access was designed mainly for tools such as backup software, which legitimately need to read every file on a drive. Once an app has it, though, it can also reach your Mail data, Messages history, browsing history and other files that macOS normally keeps walled off.

Apple says some developers are using the permission in ways that put users at risk, exposing far more than people realize when they click through a setup screen. Going forward, the company says, anyone who wants to grant an app this level of access will only be able to do so with “very explicit user action.” Apple also noted that the risk grows as AI agents become more capable and act more independently.

The announcement did not include a release date, a specific macOS version or technical instructions for developers. Coverage from TechCrunch, 9to5Mac and MacRumors agrees on that point: this is a notice of what is coming, not a change that has already shipped.

Why AI agents are part of the story

The timing is not random. Always-on AI assistants that work in the background on your computer, such as Meta’s Muse and OpenAI’s dots, often ask for broad permissions so they can read messages, files and notifications to complete tasks for you.

In late September, a columnist for Inc. reported that Muse on his Mac referred to private messages he believed it had not been allowed to see. Meta disputed this, saying its Messages integration is opt-in and requires Full Disk Access plus further confirmation steps. TechCrunch also pointed to a reported flaw in the ChatGPT Mac app that could have exposed sensitive data. Whatever the details of each case, they show why a single checkbox that unlocks your whole Mac is a poor fit for software that acts on its own.

What changes for you

Question	What we know now
Has anything changed on my Mac?	No. Apple has only announced the plan.
When will it happen?	Apple has not given a date or macOS version.
Will apps lose access I already granted?	Apple has not said. Watch for details in future macOS updates.
What will it look like?	Granting access will require a more deliberate, explicit step from you.
Will backup apps still work?	Apple’s aim is to keep the permission for apps that genuinely need it, but with clearer consent.

In practice, expect a little more friction the next time an app asks for full access, and possibly clearer warnings about what you are handing over. That is a good trade for most people.

How to check which apps have Full Disk Access today

1. Open the setting: click the Apple menu, choose System Settings, then go to Privacy & Security and select Full Disk Access.
2. Read the list carefully: every app with its switch turned on can read nearly all of your data, including mail and messages.
3. Keep what you recognize and need: backup tools, some security software and certain developer or terminal apps often need this access to work properly.
4. Turn off the rest: flip the switch off for apps you do not recognize, no longer use or that do not obviously need your entire drive, including AI assistants you only use occasionally. You can remove an app from the list entirely with the minus button.
5. Test and revisit: if an app stops doing something you rely on, you can switch access back on later. Make this check part of a routine every few months.

While you are in Privacy & Security, it is worth looking at related permissions such as Accessibility, Screen Recording and Automation. AI agents frequently ask for these too, and each one gives an app significant control over your Mac.

Tips before you install an AI agent on your Mac

• Grant the narrowest permission that gets the job done. If an assistant only needs one folder, do not give it the whole disk.
• Read the setup screens slowly. Agents often bundle several permission requests together.
• Keep macOS and the agent app updated, since security fixes for these apps arrive often.
• Consider a separate user account on your Mac for experimenting with new AI tools.

Who it affects and who it doesn’t

• Affects: Mac users who run AI agents, backup tools, security suites or other apps that ask for Full Disk Access, and the developers who build them.
• Matters most for: anyone testing always-on assistants that read messages, mail or files in the background.
• Doesn’t affect: iPhone and iPad users, since this announcement is specifically about macOS. Mac users who have never granted Full Disk Access to anything will mostly notice a stricter prompt in the future.

Keeping your Mac updated is the other half of staying safe. See our guide to the recent iOS 26.7.1 and macOS security fix.

FAQ

What exactly is Full Disk Access?

It is a macOS privacy permission that lets an app read data the system normally protects, such as Mail, Messages, Safari history and files belonging to other apps. It was intended mainly for backup and similar utilities.

Should I uninstall AI agents from my Mac?

Not necessarily. The safer approach is to review what each one can access, turn off Full Disk Access unless a feature you actively use depends on it, and remove agents you no longer use.

Will Apple’s change break my backup software?

Apple has not published technical details yet. Its stated goal is to keep the permission available for apps that genuinely need it while requiring a more explicit choice from you, so backup apps are expected to keep working, possibly after an extra confirmation.

Sources

• Apple Developer: Updates to Full Disk Access in macOS
• TechCrunch: Apple says it’s tightening macOS Full Disk Access controls due to new risks from AI agents
• 9to5Mac: Apple says it’s tightening macOS privacy controls amid the rise of AI agents
• MacRumors: Apple announces Full Disk Access changes on macOS due to AI agents
• TechCrunch: Meta disputes claim that Muse read a user’s private messages without permission