Apple Tightens macOS Disk Access for AI Agents
Apple says it will make Full Disk Access on macOS much harder to grant, and it names AI agents as the reason. We explain what the permission unlocks, why agents raise the stakes, what Apple has and has not said, and a five-minute audit you can run on your Mac today.
⚡ Quick facts
- Announced: October 2, 2026, in a post on Apple's developer news site
- The problem: Full Disk Access “largely sidesteps” macOS privacy controls so backup apps can work
- The plan: additional controls so the permission is granted only with “very explicit user action”
- Why now: Apple says the risk grows as AI agents become more capable and autonomous
- Unknown: no timeline, macOS version or design yet, and no app was named
What Apple announced
On October 2, 2026, Apple told developers it would change how macOS grants Full Disk Access. In its post, reported by MacRumors and Macworld, Apple said the permission “largely sidesteps” the privacy controls in macOS in order to let backup apps work, and that it will “introduce additional controls” so access is granted only after “very explicit user action”. Apple tied the change to AI agents, saying the risks increase as agents “become increasingly capable and autonomous”.
What Full Disk Access actually unlocks
Most macOS privacy permissions are narrow: an app asks for your photos, or your contacts, and you see a prompt for each. Full Disk Access is a single switch that lets an app read almost everything, including messages, mail, contacts, photos, browsing history and files in other apps' folders. It exists because backup and security tools genuinely need that reach. Macworld points out that plenty of everyday software already holds it, including the Adobe Creative Cloud updater, Logitech's utilities and OneDrive.
Why AI agents change the risk
A backup app copies your data and does nothing else with it. An AI agent reads what it can reach, reasons about it and may send parts of it to a cloud model or act on it. If an agent with Full Disk Access is tricked by a malicious web page or document (prompt injection), it can expose far more than an app with narrow permissions. The announcement came shortly after a journalist said Meta's Muse Mac app had read their private messages, a claim Meta disputed (The Next Web has the background); Apple itself did not name any app.
What we still do not know
- When: Apple gave no date and no macOS version.
- How: it has not said whether “very explicit user action” means a new prompt, a trip to System Settings, a password, or something else.
- Existing grants: it is unclear whether apps that already hold Full Disk Access will have to ask again.
- Agents specifically: Apple has not said whether agents will get their own permission tier (mixed-news summarises what was announced).
Our take: a five-minute Full Disk Access audit
You do not have to wait for Apple. Here is the check we suggest running now:
- Open the list. System Settings → Privacy & Security → Full Disk Access.
- Remove what you do not recognise. Toggle off, then remove with the minus button; an app that really needs it will ask again.
- Question AI tools in particular. An assistant or agent app should be able to do most tasks with folder-level or per-file access. Give it Full Disk Access only if you understand why it needs it.
- Keep backup and security tools. Time Machine alternatives and antivirus software are what the permission was designed for.
- Recheck after installing anything new, and again when Apple ships the new controls.
For developers, the message is to expect a stricter grant flow and to design apps that degrade gracefully with narrower permissions (Engadget has more on the announcement).
Sources
- MacRumors: Apple announces macOS Full Disk Access changes (October 2, 2026)
- Macworld: Apple tightens macOS Full Disk Access controls as AI agents proliferate
- The Next Web: Apple moves to rein in Full Disk Access as AI agents spread on the Mac
- mixed-news: Apple plans additional controls for macOS Full Disk Access
- Engadget: Apple sounds the alarm on AI agents and Full Disk Access
Frequently asked questions
What is Full Disk Access on a Mac?
A macOS permission that lets an app read almost all your data, including messages, mail, contacts, photos, browsing history and other apps' files. It exists mainly so backup and security tools can work.
What did Apple announce?
On October 2, 2026, Apple said it will add controls so Full Disk Access is granted only with very explicit user action, citing the growing risk from capable, autonomous AI agents.
When will the change happen?
Apple has not given a date or a macOS version, and it has not described what the new controls will look like.
Did Apple name an app that misused the permission?
No. Coverage noted the announcement followed a journalist's claim that Meta's Muse Mac app read their messages, which Meta disputed, but Apple named no app.
Should AI apps have Full Disk Access?
Usually not. Most assistant tasks work with folder-level or per-file access. Grant Full Disk Access only when you understand why an app needs it.
How do I check which apps have Full Disk Access?
Open System Settings, go to Privacy & Security, then Full Disk Access. Turn off and remove apps you do not need or recognise.