What Is Full Disk Access on a Mac?

Quick answer: Full Disk Access is a macOS privacy permission that lets an app read every file on your Mac, including other apps' data such as Mail, Messages and Safari, plus Time Machine backups. Backup and security tools genuinely need it. Most other apps do not, and Apple itself says some developers misuse it.

You install a cleaner, a backup tool or a new AI assistant, and it opens a window telling you to go to System Settings and switch on Full Disk Access. Then it waits, politely, for you to hand it the keys to everything.

Most of the pages explaining this permission are written by companies whose own app is asking for it. This one is not.

What is Full Disk Access on a Mac?

Full Disk Access is the broadest file permission in macOS. Apple's Privacy & Security guide describes it as allowing apps "to access all files on your computer, including data from other apps (for example, Mail, Messages, Safari and Home), data from Time Machine backups and certain administrative settings for all users on this Mac".

Without Full Disk Access, macOS walls that data off even from apps you installed yourself. The normal file prompts, the ones about your Desktop or Documents folder, cover one location at a time. Full Disk Access skips all of them.

It is a different thing from Accessibility. Accessibility lets an app operate other apps' windows and keys; Full Disk Access is about reading data. Our guide to why Mac apps need Accessibility access covers how the four big permissions compare.

Why is Apple worried about Full Disk Access?

Because it gets round the protections everything else has to respect. On 2 October 2026 Apple published Updates to Full Disk Access in macOS, saying it "largely sidesteps these controls in order to allow backup apps to function properly on the Mac".

The same note says "some developers are using Full Disk Access in ways that could put users at risk", exposing "files, mail, messages, and even browsing history" without users' full understanding. For messaging apps, Apple adds, that also exposes the people you talk to.

Apple says it will add controls so that granting this access needs "very explicit user action", and names AI agents as the reason the risk is growing. As of 21 October 2026 it has given no dates or details, as TidBITS noted.

Which apps actually need Full Disk Access?

Apps whose job is to read everything. It is a short list.

• Backup tools. A backup that skips your mail and messages is not much of a backup. Bombich, which makes Carbon Copy Cloner, explains that macOS blocks access by default to app data such as Mail, Messages, Safari and Photos, and to external and network drives.
• Security and anti-malware software. Scanning for malicious files means looking at all of them.
• Terminal, if you use it for system work. More on that below.

Which apps should not need it?

Almost everything else. A launcher, a note app, a menu bar toy or a game has no reason to read your Messages history. Nor does an app that only opens files you pick, since macOS handles those through its normal file dialogs.

Cleaner apps sit in the middle: they want to look everywhere for things to delete. Ask whether you need the cleaning badly enough to hand over your mail, messages and browsing history for it.

How do you give an app Full Disk Access on a Mac?

You add it by hand in System Settings. There is no pop-up asking you to allow it. Quinn, an engineer in Apple's Developer Technical Support, puts it plainly: "There's not automatic prompt here. The only way to get added to that list is for the user to add you via the UI."

Following Apple's Privacy & Security guide:

1. Choose Apple menu > System Settings, then click Privacy & Security in the sidebar.
2. Click Full Disk Access (you may need to scroll down).
3. Turn on the app if it is already listed.
4. If it is not, click the Add button, select the app, then click Open.

Why some apps need a relaunch. If the app is open when you switch it on, macOS tells you it will not get Full Disk Access until it is quit, and offers to quit it for you. Stanford Medicine's IT team shows that message in its backup client setup steps. Let it quit, then open the app again.

Why is an app not showing in Full Disk Access?

Usually because it has never asked. Apps do not appear in the list until they try to read something protected, or until you add them. Quinn explains that if a process is blocked, its responsible app "will show up in System Settings > Privacy & Security > Full Disk Access even when no alert is presented".

So an app missing from the Full Disk Access list has simply not tried to read protected data yet. Click the Add button and find it in Applications yourself.

Background helpers can need their own entry. Some apps do their work through a separate helper tool, and the helper is what macOS checks. Carbon Copy Cloner used to ask you to add its helper alongside the app; TidBITS reports Mike Bombich's advice that the helper entry can go once you are on version 7.1 or later. If an app's own help pages tell you to add a helper, follow them.

Why does Terminal need Full Disk Access on a Mac?

Because the commands you run inherit Terminal's permissions. Without it, a command such as ls ~/Library/Mail typically fails with "Operation not permitted". The folder exists; Terminal is just not allowed to look.

Kevin Elliott of Apple's Developer Technical Support explains that once Terminal has Full Disk Access, the programs it starts inherit that access, which is how cp can suddenly copy files it could not before. Every command and script you run in Terminal gets the same reach.

Giving Terminal Full Disk Access is fine if you know what you are pasting. Less fine for that install command you copied from a forum at midnight.

Is Full Disk Access safe?

Full Disk Access is as safe as the app you give it to. The permission does nothing by itself; it removes the barrier around your Mail, Messages and Safari data. A backup tool from a developer you trust is the intended use. A free utility of unclear origin is the case Apple's note is worried about.

Apple's own note calls it "this extraordinary level of access", which is a fair description. If you would not hand the app your mail archive and browsing history, leave it off.

How do you revoke Full Disk Access?

Turn the app off in the same list. Open System Settings > Privacy & Security > Full Disk Access to see every app that has it, and switch off any you no longer want reading everything, or do not recognise. To remove one entirely, select it and click the minus button.

What to do when an app asks for Full Disk Access

1. Ask what the app is for. Backup or security: expected. Anything else needs a reason you can repeat back in one sentence.
2. Read the developer's explanation. A trustworthy developer says why it needs the permission and what it reads.
3. Try it without first. Leave it off and see what the app cannot do. You can switch it on later if you actually miss something.
4. Audit the list. Open Privacy & Security > Full Disk Access every few months and switch off apps you no longer use, including Terminal if you only needed it once.

Where Spellbin fits

Spellbin, our pixel-art cauldron for the Dock, does not ask for Full Disk Access: its permissions page lists Accessibility, Finder Automation, the usual Desktop, Documents and Downloads prompt, and notifications, all optional. Dropping a file on its Dock icon needs none of them.

Full Disk Access is for apps whose job is to read everything. Very few apps have that job.

Frequently Asked Questions

What does Full Disk Access do on a Mac?

Full Disk Access on a Mac lets an app read all files on the computer, including other apps' data such as Mail, Messages, Safari and Home, Time Machine backups and some administrative settings for every user. Without it, macOS blocks that data even from installed apps. You grant it in System Settings > Privacy & Security > Full Disk Access.

Why is Full Disk Access not showing an app on my Mac?

An app is missing from Full Disk Access on a Mac because it has not yet tried to read protected data, and macOS never prompts for this permission. Open System Settings > Privacy & Security > Full Disk Access, click the Add button, choose the app from Applications and click Open. Then quit and reopen the app.

Should I give Terminal Full Disk Access?

Give Terminal Full Disk Access on a Mac only if you run commands that need to read protected folders, such as ~/Library/Mail or Time Machine backups. Every command and script started from Terminal inherits that access, so anything you paste in gets the same reach. Switch it off again when the job is done.

Is it safe to give an app Full Disk Access?

Giving an app Full Disk Access on a Mac is reasonable for backup and security software from developers you trust. Apple warned in October 2026 that some developers use the permission in ways that put users at risk. Refuse it for apps with no clear need to read your mail, messages and browsing history.

Do I need to restart an app after giving it Full Disk Access?

Yes, usually. If an app is running when you turn on Full Disk Access, macOS says it will not get the permission until it is quit and offers to quit it. Reopen the app afterwards. If it still cannot read what it needs, remove it from the list, add it again and relaunch.

Final Takeaways

• Full Disk Access means everything. Other apps' data, Mail, Messages, Safari, Time Machine backups.
• Backup and security tools need it. Few other apps have a good reason.
• Missing from the list is normal. Add the app yourself with the Add button, then relaunch it.
• Terminal passes it on. Every command run from it inherits the access.
• Audit and revoke. System Settings > Privacy & Security > Full Disk Access, and switch off what you do not use.