How to protect a Mac?

Hello All,

This topic is long overdue on a peraonal level. Should have be looking to secure my MacBook long ago but here I am.

I do encrypt the HD and enable the firewall.

What else do people do? Is virus an issues with Mac? If so, do you folks use antivirus software?

Really like some feedback on this.

Thank you!

1 Like

IMO, one of the greatest threats to any computer, including Macs, is probably phishing. The second are the vulnerabilities that may exist in our devices.

Apple products are designed to be secure but new vulnerabilities are being discovered and fixed all the time, so we need to keep our devices up to date. And take reasonable steps to minimize the damage should someone access our devices. One of my favorites is:

“an administrator should create a standard user account to use when administrator privileges are not needed. If the security of a standard user is compromised, the potential harm is far more limited than if the user has administrator privileges.”

2 Likes

I am careful with email Phishing. Thanks for the reminder

So most are still not installing antivirus software in their Mac right?

The main reason to install antivirus on a Mac, IMO, Is to prevent spreading windows viruses to other people.

But if you are someone who visits questionable websites, or never met a link that you wouldn’t click, you might want to install an AV program :wink:

The best protection is locking it up in a fireproof safe. Short of that, look for a Mac-sized iPod sock.

(I don’t worry about any of this at all.)

5 Likes

. . . and leaving it there.

3 Likes

Use Little Snitch too to control network connections from apps.

1 Like

Antivirus software on Mac or Windows primarily detects malware through virus signatures, which was effective for a long time. However, for over a decade, code obfuscation tools have made it easy to alter malware signatures, reducing the effectiveness of signature-based detection. As a result, antivirus programs have lost their role as the primary defense tool for your system. Unless you’re engaging in risky activities, such as downloading cracked or pirated software, you’re unlikely to see many detections. However, if your antivirus is frequently flagging malware, it may indicate that much of it is slipping past the software.

I have the free version of Malwarebytes which I run every now and then to scan for bad actors but I think @WayneG’s advice is probably more useful. The phishers are getting better at their craft.

2 Likes

Like @jec0047, I run manual scan with the free version of Malwarebytes once in a while.

I’d add that a sensible backup strategy should be implemented in addition to everything outlined in the support article and other posts. I value my data more than I value my laptop. At this point, besides the financial impact of having to buy a new Mac, or time needed for recovery, I sort of don’t care if anything happens to the actual hardware, as I can quickly be back up and running on something else.

I’m also surprised Apple does not recommend setting up Find My in that support article above, as that can be used to remote wipe a Mac if lost or stolen (which is especially useful if you’ve not done other security precautions and someone gets access).

I wouldn’t bother installing AV software on a Mac and I wouldn’t bother installing anything else than what is already there. Windows is doing a great job protecting the OS with its own tools and so is Mac.
Most 3rd party AV apps will mess up your system, one way or another. Just don’t install stuff you aren’t sure it is safe. Always run AVTotal online scans on files you aren’t sure about. You can use Little Snitch to see what apps are phoning out.

Real malware is still not very common on Mac. You don’t have to be afraid of drivebys and stuff like this. Most common malware still needs user interaction.
Personally, I’m more afraid of software that is collecting data. Like Google stuff. Firewalls are your friend. You could also use a good VPN like Mullvad.

These are great inputs!

Yes, I only use software that are bought or from creditable source. I do try to keep software at a minimal.

I think I am going to avoid AV for now.

“The three golden rules to ensure computer security are: Do not own a computer; do not power it on; and do not use it.”

– Robert Morris Sr.

2 Likes

I use CleanMyMac & happy with the results

I have never used antivirus software.

I run the free version of malwarebytes now and again.

I have 1password and keep important documents in there.

I use Devonthink which is end to end encrypted.

I use Little Snitch, possibly a bit of overkill but very interesting to see where your computer is connecting to. The open source blocklists are great.

1 Like