What you can actually change on a MacBook to protect your data

Customizing your MacBook means more than picking a wallpaper. The settings that matter for security and privacy are scattered across System Settings, and most people never find them. You can lock down what apps see, who can wake your computer, whether your location gets shared, and how much of your activity gets stored — but the defaults assume you want convenience over control.

This guide walks you through the real customizations: the ones that change what data leaves your machine, what happens when someone picks it up, and what you can actually see about what your computer is doing. You do not need to be technical. You just need to know where to look and what each choice costs you.

Key Takeaways

  • Your most important customization is the login password and FileVault encryption, both found in System Settings under Security & Privacy — without these, someone with physical access to your Mac can read everything.
  • App permissions for location, camera, microphone, and contacts are set per-app in System Settings under Privacy & Security, and the defaults often grant access you did not intend.
  • Siri, Spotlight search, and analytics all send data to Apple by default; you can turn off each one separately in System Settings under Siri & Spotlight or Privacy & Security.
  • Your Mac stores a detailed history of what you do in System Log files and Unified Log; you cannot delete this while the computer runs, but you can see what is being recorded.
  • Trackpad and keyboard settings do not affect security, but login options (like allowing login from sleep) and screen lock timing do — both are in System Settings under General or Lock Screen.

Setting up FileVault encryption and a strong login password

FileVault is the single most important customization you can make. It encrypts everything on your drive so that if someone steals your Mac or gains physical access, they cannot read your files without your password. Without it, someone can boot into recovery mode and bypass your login entirely.

To turn on FileVault: open System Settings, click Security & Privacy, then click FileVault. Click the lock icon in the bottom left, enter your password, then click Turn On. Your Mac will encrypt the drive in the background — this can take hours on a full drive, but your computer stays usable. Write down the recovery key it shows you and store it somewhere safe, separate from your Mac. If you forget your password, you will need this key to regain access.

While you are in Security & Privacy, check your login password. Click the lock icon, then go to the Password tab. Your password should be at least 12 characters and include uppercase, lowercase, numbers, and symbols. A passphrase — like "Coffee-Mug-Tuesday-47" — is easier to remember and just as strong. Do not use your birthday, pet name, or anything that appears in your social media.

Controlling what apps can see: location, camera, microphone, and contacts

Every app on your Mac can ask for permission to see your location, use your camera, listen through your microphone, or read your contacts. macOS asks the first time an app tries to use each one, but the defaults are often "allow." You can see and change these permissions anytime.

Open System Settings and click Privacy & Security. You will see a list on the left: Location Services, Camera, Microphone, Contacts, Calendar, Photos, and others. Click each one. You will see a list of apps that have asked for access and whether you said yes or no. For each app, ask yourself: does this app actually need this permission to work? A weather app needs location. A note-taking app does not. A video call app needs camera and microphone. A news reader does not.

Turn off any permission you did not intend to grant. If an app stops working after you deny permission, you can always turn it back on. The app will ask again the next time it needs access, and you can say yes then. This is the right way to use your Mac — deny by default, grant only what is necessary.

Turning off Siri, Spotlight, and analytics

Siri listens for "Hey Siri" and sends audio to Apple's servers to process your request. Spotlight search indexes your files and can send search queries to Apple. Analytics collects data about how you use your Mac and sends it to Apple. None of these are required to use your computer.

To turn off Siri: open System Settings, click Siri & Spotlight, then uncheck "Listen for 'Hey Siri'". You can still use Siri by pressing Command-Space and typing, but your Mac will not listen for the voice trigger.

To control Spotlight: in the same Siri & Spotlight settings, uncheck any category you do not want indexed — for example, you might uncheck "Siri Suggestions" to prevent Spotlight from sending your searches to Apple. You can keep Mail, Files, and other local categories checked if you want to search your own files.

To turn off analytics: go to System Settings, click Privacy & Security, scroll down to Apple Intelligence & Siri, and uncheck "Improve Siri & Dictation" and "Share iCloud Analytics". Then go back to Privacy & Security, click Analytics, and uncheck "Share Mac Analytics" and "Improve Connectivity".

Locking your screen and controlling what wakes your Mac

If you step away from your Mac, how long until the screen locks? The default is often 15 minutes, which means someone could sit down and use it while you are gone. You can change this.

Open System Settings and click Lock Screen. Set "Start screen saver after" to a shorter time — 1 or 5 minutes is reasonable. Then set "Turn display off after" to the same time or shorter. When the display turns off, your Mac will require your password to wake it (as long as you have not disabled that option).

While you are in Lock Screen settings, check "Require password when ready after sleep or screen saver begins". This closes a small window where someone could wake your Mac and use it without entering a password. Also uncheck "Allow access on the lock screen" for anything you do not need — Siri, Control Center, and notification replies can all wait until you unlock.

In System Settings under General, click Login Items. Remove any app you do not want to start automatically when you log in. Then go to General again and click Sharing. Turn off any service you do not use — Screen Sharing, File Sharing, Remote Login, and AirDrop can all be turned off if you do not need them.

Understanding what your Mac logs and where to find it

Your Mac keeps detailed records of what happens on it: which apps you opened, which websites you visited (if you use Safari), what errors occurred, and what network connections were made. These logs are stored in files you can view but not easily delete while the computer runs.

To see some of this activity, open the Console app (search for it in Spotlight). You will see a stream of system messages. This is not a complete picture of your activity — Safari history is separate, and many apps keep their own logs — but it shows you what the operating system is recording.

You cannot delete these logs while your Mac is running, and you should not try. They are used for troubleshooting and security. What you can do is understand that they exist and know that if someone with physical access to your Mac gets past your password, they can read them. This is another reason FileVault and a strong password matter: they are your only defense against someone reading these logs.

Customizing what iCloud syncs and where your data goes

If you use an Apple ID, your Mac can sync files, photos, mail, and other data to iCloud. This is convenient, but it means copies of your data live on Apple's servers. You can control what syncs.

Open System Settings and click your Apple ID at the top. Click iCloud. You will see a list of services: Photos, Mail, Contacts, Calendars, Reminders, Notes, Keychain, and others. Uncheck anything you do not want synced to iCloud. If you uncheck Photos, your photos stay only on your Mac. If you uncheck Keychain, your saved passwords and credit cards do not sync to other devices.

Be aware that unchecking a service does not delete data that is already in iCloud — it just stops new data from syncing. If you want to remove something from iCloud entirely, you will need to do that through iCloud.com on a web browser.

Frequently Asked Questions

What happens if I turn off Siri and Spotlight?

Siri will not listen for "Hey Siri," but you can still use it by pressing Command-Space and typing. Spotlight will still search your files locally; it just will not send your searches to Apple. Your Mac will work normally — you are just removing features that send data off your computer.

Can I see what apps are using my camera or microphone right now?

Yes. In the top-right corner of your menu bar, you will see a small dot or icon when an app is using your camera or microphone. Click it to see which app is using it. If you see it and did not expect it, you can force-quit the app in Activity Monitor or just deny the permission in Privacy & Security.

If I encrypt my drive with FileVault, will I lose my files?

No. FileVault encrypts your files in place — they stay on your drive, but they are scrambled so only someone with your password can read them. The encryption happens in the background and does not delete anything. You will not notice a difference in how your Mac works.

Do I need to customize everything at once?

No. Start with FileVault and a strong password — those are the most important. Then turn off Siri and Spotlight if you do not use them. Then review app permissions. You can make these changes over time as you learn what each one does.

What if a customization breaks something?

You can undo almost any customization by going back to the same settings and turning it back on. The only exception is FileVault — once it is on, you need your password to turn it off. If an app stops working after you deny a permission, turn the permission back on and the app should work again.