Hi, this is Gary with MacMost.com. Today let me show you ten security
settings on your Mac that you should take a look at.
MacMost is brought to you thanks to a great group of more than 900 supporters.
Go to MacMost.com/patreon. There you can read more about the Patreon Campaign.
Join us and get exclusive content and course discounts.
So there are a ton of settings in System Preferences and elsewhere on your Mac.
I want to show you ten that have an impact on the security of your Mac. Now I'm not going to
tell you that you need to set every single one of these. But it's important to know what they
are and what they do. You may want to turn some of them on and leave others off. I'll categorize each
one one of three ways either as a top priority, something you should really consider doing,
a just do it, in other words it probably doesn't hurt to turn this on, or a best practice,
something you may want to consider but not everybody wants to turn on.
So as you can imagine a lot of these are going to be in System Preferences,
Security & Privacy. So let's start off there. Under General there's a setting for Require
Password after a certain number of minutes. Now you should definitely have this turned
on. You want to require a password to make sure if somebody steals your Mac they can't get into
it and get access to all of your documents, passwords, accounts, and other things. But
you also want to make sure you set this time to something pretty low. I would never set it for
anything more than 5 minutes. Now I know that can seem inconvenient. You go leave to get a cup of
coffee, come back, and have to enter your computer password again. But it's just basic security. You
shouldn't mind having to type your password a few dozen times a day if that's what it takes to keep
everything that you've got secure. Five minutes is probably fine for a desktop Mac. Something
that never leaves your home or office. But you may want to consider going down to one minute
if you have a portable Mac. Something you might be bringing around with you throughout the day
or taking with you on travel. Or even have it set to Immediately which is how I do it on my MacBook.
Now while we're here we've got another setting you should look at which is Just Best Practice. Click
on the padlock here to Authenticate and now you've got show a message when the screen is locked.
Here you can turn that on and you can set a message. This will appear on the locked
screen. So in other words if you loose your Mac it's easy for somebody to open it up and see
either a phone number or an email address or someway to contact you or a place to
take the MacBook. The less people that have to handle your MacBook if you loose it the better.
The first person to find it has a way to get in touch with you then great. Otherwise they
may turn it into somebody who then may turn it into a lost and found and it may just keep going
down the line. Every person that touches it that means it will take longer to get back to you and
more of a chance of somebody just trying to steal it or take it for parts or something.
Now also right here in Security & Privacy, in General, there's Allow apps dowloaded from.
So here you can set it to App Store or App Store and identified developers. Now for the higher
security you want to set it to App Store. Only Allow Apps from the App Store. It does
not mean you can't go in here to change this to download another app that you may need that's only
available directly from the developer's site and it should be, of course, a developer's site that
you trust. But having it set by default to App Store will prevent you from accidentally making
a mistake or maybe if somebody else also uses your Mac having them make a mistake as well.
Now in Security & Privacy the second tab is FileVault. So FileVault will encrypt everything
on your drive. Without FileVault turned on, even is somebody can't get into your Mac because
they don't know the password, technically somebody could take the drive out of it,
connect the drive to another computer and all the data is there. However if you have FileVault
turned on everything on the drive is encrypted. I'll classify this as a Best Practice but really
just for Desktop Macs it's the Best Practice. If it's a MacBook definitely have this turned on. I
make it a Top Priority. It's painful though to turn this on if you've already been using your
Mac and have it off. It's going to take awhile to turn this on if you've already been using
your Mac and you have it off. It's going to take a while to encrypt everything. So if you've been
using your Mac with FileVault off and you don't think you're in much danger of having your Mac
Stolen, then maybe keep in mind for the next Mac to have this turned on from the get go.
Now let's go back to the top level of System Preferences. Go to Sharing. Now in Sharing on the
left you have File Sharing. Now if you have that turned On anybody on the same network can see your
computer, they can see that you're there, the name of your computer and even stuff you have shared.
If you have anything shared without a password like Public Folder, then they'll have access to
it. Now no problem if you're at work or at home. These are private networks. But the minute you
log onto a network, say at a school or maybe at a hotel other people can see your Mac. As a matter
of fact sometimes when you travel you may notice other people's hard drives popping up
in left side of the Finder window because they have File Sharing turned on and they are on the
same network as you. So turn off File Sharing. In most cases it's not a big security issue
but it just gives you peace of mind to have that turned off. If you need to use File Sharing for
something when you're at home or at work you can turn it on, use it, and then turn it off again.
Now in System Preferences you can go to Siri. Under Siri what you see depends
on whether or not you have Touch ID on your Mac. So if you have a MacBook with Touch ID
you're going to have the option here to allow you to activate Siri
using your voice even if your Mac is locked. Now this usually isn't a big issue. But people can
access certain things and send text messages and do stuff using this. So for peace of mind
it's a best practice to have this turned Off for security reasons. But if you have a good
reason to have this on, like if you often find that you need to be able to activate
Siri with your voice through your Mac, then you could argue that you should have it turned on.
Now under Network in System Preferences if you go to WiFi you'll see that you've got a list of
network names and for each one, when you select it, you have Automatically Joined this Network.
Now that makes sense. It's only going to have networks in this list that you've already joined
and having it automatically joined it again saves you a lot of time. But keep in mind sometimes you
may join networks that you don't fully trust like maybe one at a coffeeshop. So you join
the network, you use it for some basic things, something that doesn't really need security,
but then you forget that you've got it in your list here and then next time you're
in that area it's going to automatically join that network. This time you may not realize it
and actually do something that requires a little bit better security.
So, every time you join a new network make sure you look in here for the network name
and maybe turn off Automatically Join this Network if it's only one you kind of trust.
Next let's look at Users & Groups. If you go to Login Items here and Authenticate
first it goes without saying you should have Automatic Login turned Off. You should
definitely not be using Automatic Login. It's a big security issue. So that's a Top Priority.
But in addition what you may want to do is Display Login Window As, Name and Password. So when you go
to login you have to type in your user name and your password. Otherwise if you use List of Users
it gives all of the user names. You see all of the users on the computer and this may give clues as
to who you are. Who owns this Mac. But also then all that somebody who steals your computer has
to do is then guess the password. But if you say Name and Password they have to guess both
your user name and your password which makes it so much harder for them to break into your Mac.
In Safari, if you go to Safari Preferences, under General, there's an option for Open safe files
after downloading. So in other words if you were to download a pdf it would automatically
open up that pdf. Well first I find this a little annoying sometimes. Sometimes I just
want to download something. But also years ago there were exploits that abused this
to install malware. You would click on a link that would download something that would automatically
open it up in another app and then use an exploit to install malware. Now there's nothing like that
out there right now. So really it kind of makes no difference whether you have this turned on or
off. But I feel it's a good security measure to have this turned off. After all if you want to
view a file you can download it and then double click it to open it. It's not like it's that hard
to view a file once you've downloaded it. So this little convenience isn't worth the risk.
Now back in System Preferences there's Software Update and you should really have Automatically
keep my Mac up to date. Under Advanced all of these checkboxes checked. Remember it's
not just important to keep your system up to date to get all the security patches
but apps as well. So having app updates from the App Store install new apps automatically
is really important. There may be apps that you rarely use and you may not notice when
there are new updates that include important security patches until it's months later.
But having all the apps up to date will keep your Mac more secure.
Here's a bonus one. In Time Machine Settings when you go to create a new Time Machine Backup,
some of you select disk. Look at the bottom here. There's a checkbox here for encrypt backups. So
here's the issue. Say you're using FileVault on your Mac to keep everything there secure but
somebody breaks into your office, steals your Mac and the Time Machine drive. If the Time Machine
drive isn't encrypted they've got all your files. All they need to do is hook it up to any other Mac
and all the files will be there. Only if it's encrypted will they not be able to get to the
files there. So you should definitely use encryption on a Time Machine backup.
However, if you have a Time Machine Backup now that's not encrypted it's painful to encrypt it.
If you turn on encryption it's going to take days for it to finish that encryption. It'll
do it in the background but it will still take a long time. So if your drive is relatively secure,
you're not really afraid of somebody stealing that Time Machine backup drive,
then you may want to hold off and simply use encryption the next time your get a new Time
Machine backup drive or decide to restart your Time Machine backup from scratch.
So hopefully you're already doing a lot of these. You may not want to do all of them.
You may want to judge based on your own security risks and how you use your Mac.
But if you're not doing very many of these hopefully you'll consider adding a
few of them just to make your Mac a little bit more secure.