October 5, 2026, 1:15 pm | Read time: 3 minutes
More and more AI agents can independently operate the computer. On macOS, this is possible through what is known as full disk access, which allows programs to access almost all data such as emails, chats, and browsing history. Apple now warns that some developers are using this feature in a way that poses a risk to users. New rules for full access are intended to prevent this.
What is Full Disk Access?
This type of access was originally introduced so that backup programs could seamlessly create backups of the entire computer. The feature bypasses the usual macOS protection mechanisms and allows access to all files, emails, messages, Safari data, and even Time Machine backups of all users on a Mac.
Meanwhile, developers of AI software are also using this permission. AI agents are supposed to autonomously perform tasks for their users. They require deep access to emails, chats, calendars, and sometimes even bank accounts. However, Apple sees a problem in this:
“Some developers use full disk access in a way that could expose users to risk by revealing all contents on their systems […], without users knowing or understanding. For communication apps, this could also endanger the privacy of the people with whom users communicate.”
To protect users, Apple has now announced changes for full disk access: “We want to ensure that users clearly understand these risks before granting such extensive access.”
What Changes for Mac Users
With the new regulation, users must explicitly consent to full disk access for individual apps: “In the future, we will introduce additional protection mechanisms so that users who truly wish to grant an app this exceptionally extensive access right can only do so through a very clear, deliberate action.”
The company has not described exactly what these tightened controls will look like. As of now, the changes are not present in macOS 27, which was released in mid-September, nor in the current beta of macOS 27.2.
Also interesting: macOS 27 hints at a new MacBook “Ultra” with a touchscreen
Users can check under the path “System Settings” > “Privacy & Security” > “Full Disk Access” to see which programs have the option enabled. Many programs with agentic AI will likely request access again after deactivation. If full disk access is revoked, a significant portion of the agentic capabilities will likely be lost–especially regarding interaction with emails, chats, and files.