Apple will better secure the extensive full access to Mac hard drives in the future: According to developer information from October 2, 2026, apps and AI agents will only receive this permission after an explicit confirmation.
The company has not yet provided a specific timeline, but it has stated the reason: growing risks from increasingly autonomous AI agents.
Apple cites AI agents as the reason for the tightening
The macOS permission "Full Disk Access" allows an app to view practically all data on a Mac: documents, emails, messages, and even the browsing history. Originally intended for backup programs, according to Apple's developer information, some other applications are now also exploiting this extensive access.
The company explicitly justifies the announced tightening with AI agents: the more autonomously such programs act, the greater the risks of this access level. In the future, access will only be possible after an explicitly conscious action, such as an additional confirmation in the system settings instead of a simple switch.
How exactly this confirmation will look and from which macOS version it will apply remains open.
That such access can have real consequences was already evident in the summer: a security vulnerability in Anthropic's AI agent Claude Cowork allowed breaking out of the otherwise isolated Mac environment and accessing files of the entire user account, including access credentials.
Even without a security vulnerability, the trend is noticeable: recently, for example, ChatGPT answers iMessages and SMS directly on the Mac upon request, for which the app requires extensive permissions.
How to check your own full access today
Anyone who owns a Mac does not have to wait for the announced changes to control their own permissions. A look into the system settings shows in a few steps which programs currently have full access:
- Open the system settings and go to "Privacy & Security."
- Select the item "Full Disk Access."
- Go through the list of shared apps and deactivate unknown or no longer used entries.
- If unsure about an app, first research its manufacturer and purpose before keeping the access.
An assistant who has equipped, for example, an AI-supported transcription or note-taking tool with full access to automatically save meeting notes should regularly check whether this program still actually needs the permission or whether a more limited access restricted to individual folders is sufficient.
For daily office work, the announcement initially means no immediate change: existing permissions will continue unchanged for the time being, and Apple has not specified a date or an affected macOS version. Developers of Mac software, on the other hand, must already prepare for stricter requirements and clearer warnings when requesting permissions, which will likely change the user interface of familiar programs in the medium term.
It will be crucial how exactly Apple implements the announced "explicit action" and whether it presents additional hurdles for employees in their daily office work when they want to set up a new AI tool. Anyone working with business documents or customer data on a Mac should already equip only those programs with full access whose purpose and provider are clearly understandable, regardless of Apple's timeline.
It remains to be seen whether Apple will introduce the new rules this year or only with a future macOS version.
