Apple to tighten macOS Full Disk Access over AI agent risk
Apple says it will add stricter controls to macOS Full Disk Access, warning that the permission exposes far more of a Mac than users realise and that increasingly autonomous AI agents make the risk worse.
Apple has signalled that it will tighten Full Disk Access on the Mac, the sweeping permission that lets an app read almost everything on a user's system.
A permission that sidesteps macOS privacy controls
In a developer news post dated 2 October 2026, the company said Full Disk Access exists so that backup apps can work properly, and that it "largely sidesteps" the privacy controls built into macOS. It warned that some developers are using the permission in ways that put users at risk, exposing everything on a machine — including files, mail, messages and even browsing history — without the user's full knowledge or understanding. For communication apps, Apple added, that can also compromise the privacy of the people a user is talking to.
Explicit consent, and the AI agent factor
Going forward, Apple said it will introduce additional controls so that anyone who genuinely wants to grant an app this level of access can only do so with "very explicit user action". The company tied the change directly to autonomous software, saying that as AI agents become increasingly capable and autonomous, the risks that come with this level of access will grow substantially. The stated aim is to make sure users understand those risks before they grant access, so they can make informed decisions about their own data and privacy.
Apple did not set a date for the new controls and did not name the apps or developers it has in mind. The post places the change in the middle of a wider run of macOS privacy work, and it arrives as agentic tools that read local files — from coding assistants to chat apps wiring themselves into a desktop — become ordinary rather than novel.
Our opinion
Full Disk Access was always an oddity: a permission broad enough to make every other privacy prompt on the Mac moot for whatever app holds it, granted mostly because backup tools needed somewhere to stand. Framing the crackdown around AI agents is the interesting part, because it quietly admits that the threat model has moved on from a careless app to software that reads files on its own initiative and at scale. Apple's instinct — replace a single blunt switch with something more deliberate — is the right one. The test is whether the extra friction lands on the apps that genuinely need the whole disk, or on everyone, and that answer will not be clear until the controls actually ship.