Apple is changing Full Disk Access on macOS. What it means for you

Full Disk Access is the macOS permission that lets an app read every file in your home folder, including Mail, Messages, Safari history and the contents of other apps' containers. This week Apple said it will add "additional controls" to Full Disk Access on macOS, and that granting it will require more explicit action from the user. The reason Apple gave is new: AI agents. Some AI tools have been asking for Full Disk Access to reach data such as Messages, and Apple argues users don't understand how much that hands over.

If a utility on your Mac has ever asked you to flip that switch, this affects you. Here is what the permission actually does, why Apple is tightening it, what the change will look like in practice, and how to audit your own Mac in five minutes.

What Full Disk Access actually grants

Since macOS Mojave, a handful of folders are protected by the system even from apps you've installed: Mail, Messages, Safari data, Time Machine backups, Photos and the containers sandboxed apps keep under ~/Library/Containers. An app can't read them just because it runs as you. It has to be added, by you, under System Settings › Privacy & Security › Full Disk Access.

Once added, the app can read everything in your account, and on most Macs that means the whole disk minus the sealed system volume. There is no "Full Disk Access except Messages." It is all or nothing, which is the heart of Apple's complaint.

Why Apple is changing it now

The trigger was AI agents. An AI assistant that can "see everything on your Mac" is a compelling demo, and the quickest way to deliver it is to ask for Full Disk Access on first launch. Apple's statement describes developers using the permission "in ways that could put users at risk," exposing files, mail, messages and browsing history without users' full understanding. The Meta Muse dispute over Messages data appears to be the specific case that forced a response.

The fix Apple described is friction: a more deliberate grant flow, so a one-click "Allow" buried in an onboarding screen is no longer enough. Expect something closer to how screen recording and accessibility permissions already work, with a clearer warning and possibly a periodic reminder of which apps hold the permission.

What changes for you

Nothing is removed from your Mac today. Apps that already have Full Disk Access keep it until you revoke it or until the macOS update ships the new controls. When it does:

• Granting the permission will take more steps, and the dialog will say more plainly what it covers.
• Apps that demanded it for convenience rather than need will feel the friction first, and many will switch to narrower permissions.
• You will probably be reminded, as with location access, which apps hold it.

That is good for you. The permission was always too blunt; the change makes the blunt tool harder to pick up by accident.

Which apps genuinely need Full Disk Access

A short list:

• Backup tools (Time Machine alternatives, cloud backup clients) that must copy everything.
• Antivirus and security scanners that need to inspect every file.
• Disk analysers and cleaners, but only for the protected corners. A cleaner can scan caches, logs, Downloads and most of ~/Library without the permission. It needs Full Disk Access only to see Safari's cache, Mail attachments, Time Machine snapshots and sandboxed app containers.
• Developer tools that index your whole drive, such as some search utilities.

Everything else, including chat assistants, note-taking apps, launchers and menu-bar widgets, should get by with the specific folder prompts macOS already offers (Downloads, Documents, Desktop) or with files you drag in yourself.

How AI Mac Cleaner handles it

AI Mac Cleaner runs without Full Disk Access. Caches, logs, developer junk, installers, duplicates and app leftovers are all found with your normal user permissions, which is why the first scan works the moment you open the app. The sidebar shows a small "Limited access" note so you know the scan skipped Safari data and some app containers; granting the permission is optional and you can remove it again at any time. Nothing the app finds is deleted outright, either; everything goes to the Trash first.

That design is also why Apple's change does not break the app. The optional grant will simply take a couple more clicks.

Audit your Mac in five minutes

1. Open System Settings › Privacy & Security › Full Disk Access.
2. Read the list. For each app, ask: does this need to read my Messages and Mail to do its job? If not, switch it off. The app keeps working for everything outside the protected folders.
3. Do the same for Accessibility and Screen Recording, two other permissions that AI tools ask for freely.
4. If an app you removed stops working entirely, it was using the permission as a shortcut; look for an alternative or re-enable it knowingly.

For a broader check of what is running on your Mac, the Protection screen in AI Mac Cleaner lists background items and who signed them, and the Malware screen flags unsigned ones and installed profiles.

Frequently asked questions

Is it safe to give an app Full Disk Access?

Only if you would trust that app with your Messages, Mail and browser history, because that is what you are handing over. For backup and security tools from known developers, yes. For an AI assistant or a utility you installed yesterday, think twice.

Does AI Mac Cleaner require Full Disk Access?

No. It scans and cleans without it. Granting it is optional and only adds Safari data, Mail attachments and some app containers to the scan.

Will Apple's change remove permissions I already granted?

Apple has not said so. Current grants stay until you change them or until the new controls arrive in a macOS update, so review the list yourself now.

How do I remove Full Disk Access from an app?

System Settings › Privacy & Security › Full Disk Access, then flip the toggle off next to the app. You may be asked to quit and reopen the app.

Which macOS version will get the new controls?

Apple announced the change on 2 October 2026 without a version number. It will most likely arrive in a point update to the current macOS rather than waiting for next year's release.

Sources: Apple's announcement as reported by MacRumors and Time.