macOS Full Disk Access is getting stricter: check your apps

Apple is tightening macOS Full Disk Access, the Mac permission that lets an app read almost everything on your computer, and it says AI agents are the reason. In a post on its developer news site on October 2, 2026, Apple said granting that access will take "very explicit user action," but it gave no macOS version or date. You don't have to wait for the change to see which apps already have it.

Key takeaways

The change is announced, not shipped. Apple's developer post promises "additional controls" for Full Disk Access with no version number or timeline, as of October 3, 2026.
AI agents are the stated reason. Apple says some developers use the permission to expose files, mail, messages and browsing history "without users' full knowledge," and that agents make the risk "grow substantially."
Apple named no company. Its post followed an Inc. columnist's claim that Meta's Muse agent read his Mac Messages. Meta disputes that, and the claim has not been independently verified.
You can audit it today. Apple documents the setting under System Settings, Privacy & Security, Full Disk Access.

What changes in macOS Full Disk Access

Apple's post is short. It says Full Disk Access "largely sidesteps" the privacy controls Apple builds into macOS, and that it exists so backup apps can work properly on the Mac. Then comes the problem: some developers, Apple says, are using it in ways that could put users at risk, exposing "everything on their systems," including "files, mail, messages, and even browsing history."

Apple adds a point that is easy to miss. For communication apps, that access "can also compromise the privacy of the people users are communicating with." In other words, the people in your Messages history never agreed to anything.

The fix, in Apple's words, is "additional controls" so that anyone who "genuinely" wants to grant this level of access "can only do so with very explicit user action." Apple ties it directly to AI: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially."

What Apple did not say matters as much. MacRumors notes there is no implementation date, and TechCrunch reports that Apple did not answer its questions about the change. The post doesn't describe what "very explicit" will look like on screen.

What Full Disk Access unlocks on your Mac

Most Mac permissions are narrow: your camera, your Desktop folder, your location. Full Disk Access is the broad one. Apple's Mac User Guide describes it as letting apps access all files on your computer, including data from other apps such as Mail, Messages, Safari and Home, data from Time Machine backups, and some administrative settings for every user on the Mac.

Backup tools are not the only apps that ask for it. MacStories' John Voorhees checked his own MacBook Pro and found it granted to launchers and utilities such as Alfred, Hazel and PopClip, plus Pixelmator Pro, Setapp and even a game. His concern is that Apple hasn't said whether the change means an extra approval step or limits on which kinds of apps can get the permission at all.

The Messages dispute behind the timing

The timing points to Meta's Muse, though Apple's post never mentions it. Jason Aten wrote in a column for Inc. that Muse surfaced details of his private conversations even though he had declined to give it Messages access. According to The Next Web's account, Aten found Muse had synced more than 187,000 rows of his Mac's Messages database, while his settings showed Full Disk Access switched off.

Meta denies it. The Next Web reports that Meta communications chief Andy Stone said on September 30 that Muse can't read Messages unless you turn on both Full Disk Access and the Messages connector inside Muse, and that David Singleton of Meta Superintelligence Labs called the Messages integration opt-in. As of October 3, neither side's account has been confirmed by an independent investigation.

TechCrunch also connected Apple's move to a separate, reported flaw in ChatGPT's Mac app, which Apple's post doesn't mention either. If you use Muse, our look at whether Meta Muse is safe covers an earlier Muse for Mac flaw that was hot-fixed in September.

How to check and revoke Full Disk Access today

You don't need to wait for Apple. Based on Apple's documentation for current macOS versions, this is where the setting lives:

Choose Apple menu, then System Settings.
Click Privacy & Security in the sidebar. You may need to scroll down.
Click Full Disk Access to see the list of apps.
Turn off the switch for any app you don't recognize or no longer use, including AI agents and assistants you only tried once. Apple's guide to the neighboring Files & Folders list describes the same per-app on-or-off control.

Before you switch everything off, think about what each app does. Apple says Full Disk Access exists for backup apps, so a backup tool without it may not be able to copy all your data. You can turn the switch back on in the same place. On macOS 12 or earlier, Apple's platform security guide says these permissions live in System Preferences instead.

Two more lists worth a look

Agents that operate your Mac for you may also appear elsewhere in Privacy & Security. Apple describes Accessibility as letting apps "run scripts and system commands to control your Mac," and Automation as letting apps "access and control other apps." If an AI tool shows up in either list and you don't use that feature, it's worth reviewing too.

Why it matters for AI agents

A backup app copies files. An AI agent reads them, acts on what it finds and may send it to a cloud service, so the same permission carries more risk. That is Apple's argument, and it fits a pattern of agents doing more than people expected, which we covered in our piece on AI security incidents at OpenAI and Anthropic. For the wider threat picture, see our coverage of Microsoft's Digital Defense Report 2026.

What happens next

The open questions are the ones Apple left blank: which macOS release brings the change, whether apps that already have the permission keep it, and what the new step looks like. Apple's annual Mac release cycle and developer betas are the likely place to see it first, but that is our inference, not something Apple said. Developers of backup tools, launchers and AI agents will be watching most closely, and you can follow more software news as details arrive.

Bottom line

Apple says macOS Full Disk Access will get harder to grant because AI agents make it riskier, but it hasn't said when or how. The useful step is yours to take now: open Privacy & Security, look at the Full Disk Access list, and switch off anything you don't need. Keep backup apps you rely on, and treat any AI agent asking for full access the way Apple now does, as an extraordinary request.

FAQ

What is Full Disk Access on a Mac?

It's a macOS privacy permission that lets an app read all the files on your computer, including other apps' data such as Mail, Messages and Safari, plus Time Machine backups, according to Apple's Mac User Guide. Apple says it exists mainly so backup apps work properly.

When will Apple's Full Disk Access change arrive?

Apple hasn't said. Its October 2, 2026, post promises additional controls requiring very explicit user action, but names no macOS version or date, and Apple didn't answer TechCrunch's questions about it.

Is it safe to turn off Full Disk Access for an app?

Generally yes, but the app may lose features that depend on it. A backup app may not be able to copy everything, for example. You can turn the switch back on later in System Settings, Privacy & Security, Full Disk Access.

Does Meta Muse need Full Disk Access to read Messages?

Meta says yes: according to The Next Web, Meta says Muse can read Messages on a Mac only if you turn on both Full Disk Access and the Muse Messages connector. Inc. columnist Jason Aten says Muse reached his messages anyway, and that claim hasn't been independently verified.