macOS Full Disk Access Is Changing: What Mac Users Should Review
Apple plans clearer Full Disk Access controls as AI agents become more capable. Here is what the permission can currently reach, what Mac users can review now and what Apple has not announced.
Direct answer: Apple says it will add controls so granting Full Disk Access requires very explicit user action as AI agents become more capable. Apple has not announced the design, macOS version or release date. Mac users can review current access in System Settings under Privacy & Security and keep only permissions they intentionally need.
Apple's October 2 developer announcement says Full Disk Access largely sidesteps normal privacy controls. Apple says some developers are using it in ways that can expose files, mail, messages and browsing history without users fully understanding the reach of the permission. For communication apps, Apple also warns that another person's privacy can be involved.
The announcement is a direction, not a finished feature specification. Apple did not name a macOS release, show the future approval flow, say that current grants will be revoked or identify any app that will lose access.
What did Apple announce about Full Disk Access and AI agents?
Apple says it will introduce additional controls so a person who genuinely wants to grant Full Disk Access can do so only through very explicit action. The company connects that change to increasingly capable and autonomous AI agents, but the permission is not limited to AI software.
Apple describes Full Disk Access as an exceptional permission originally intended to let backup apps function properly. Its concern is that the same broad access can now be used by other apps without people appreciating how much information becomes readable.
This does not mean every app with Full Disk Access is unsafe. Backup, security, storage-management and other tools may have a legitimate reason to request it. The useful question is whether each current grant still matches a feature you knowingly use.
What can Full Disk Access see on a Mac?
Apple's current Mac User Guide says Full Disk Access can let an app reach all files on the computer, including data from apps such as Mail, Messages, Safari and Home, Time Machine backup data and certain administrative settings for all users on the Mac.
That is broader than choosing one document or allowing access to one folder. It can also involve information belonging to people who communicate with the Mac owner, which is why Apple's announcement treats informed consent as important.
Full Disk Access is not the only relevant control. Apple Platform Security documents separate consent boundaries for Files and Folders, Accessibility and Automation. Reviewing one pane does not automatically review every other permission an app may hold.
What should Mac users review now?
- Open the current permission list: choose Apple menu > System Settings, select Privacy & Security, then review Full Disk Access.
- Identify every entry: confirm that you recognize the app and understand which feature needs broad file access.
- Check whether the need is current: an app you no longer use, or a feature you disabled, may no longer need the same permission.
- Review adjacent permissions separately: Files and Folders, Accessibility, Automation, Input Monitoring and Screen & System Audio Recording are distinct controls with different effects.
- Expect a feature tradeoff: changing access can stop a backup, security, automation or agent feature from working. Check the developer's current documentation before relying on that feature again.
This is a permission inventory, not a malware diagnosis. Do not delete app data, change system files or assume an unfamiliar helper is malicious solely because it appears in a privacy pane. If an entry is unclear, identify its parent app and vendor before deciding.
Does FileVault replace Full Disk Access review?
No. FileVault encrypts the startup disk and protects data when the volume is locked. Full Disk Access governs what an approved app can reach while a user is signed in and the system is running. One control does not cancel the purpose of the other.
When will Apple's new Full Disk Access controls arrive?
Apple has not announced a date, macOS version, interface, migration behavior or developer requirement beyond the commitment to additional controls and very explicit user action. A future beta or report should not be treated as the final behavior until Apple publishes the implementation details.
For now, the practical action is to understand the permission already granted on each Mac. The future controls may make new grants clearer, but Apple's announcement does not say that existing permissions will be audited or removed automatically.
What remains unknown?
- Which macOS release will contain the new controls.
- Whether existing Full Disk Access grants will require renewed approval.
- Whether Apple will restrict eligible app categories or only change the consent flow.
- How managed Macs and enterprise deployment policies will interact with the new controls.
- Whether the change will apply differently to AI agents, communication apps, backup tools or other software.