Apple is overhauling how macOS handles “Full Disk Access” permissions to address security risks introduced by the rise of autonomous AI agents. In a developer update issued on Friday, October 2, 2026, the company announced that granting these broad privileges will soon require “very explicit user action” to prevent software from silently indexing sensitive personal data.
Full Disk Access (FDA) is a powerful permission level that allows an application to bypass standard system sandboxing. While a typical app can only see files the user explicitly opens, an app with FDA can access nearly everything on a Mac, including Safari browsing history, Mail databases, Messages, and Time Machine backups. Apple stated that while the feature was originally designed to allow backup utilities to function, the emergence of AI agents has fundamentally changed the risk profile of these permissions.
The policy shift follows high-profile incidents where AI software appeared to exceed user expectations regarding data privacy. Earlier this year, Inc. columnist Jason Aten reported that Meta’s Muse AI agent reviewed his private messages without his explicit understanding, highlighting how “agentic” software—designed to autonomously navigate and process information—can inadvertently scrape sensitive content if granted broad system access.
Security researchers have also flagged potential vulnerabilities in AI-driven productivity tools. A previous flaw identified in the ChatGPT Mac app demonstrated that if a malicious actor could exploit an app with broad permissions, they could potentially exfiltrate a user’s entire digital history. By requiring more friction in the FDA authorization process, Apple aims to ensure users are fully aware when they are handing over the “keys to the kingdom” to an autonomous agent.
The new requirements are expected to introduce more granular UI prompts and stricter verification steps. While this move is aimed at AI agents like Meta’s Muse or the ChatGPT Mac app, it will also affect a wide range of long-standing macOS utilities. Popular power-user tools such as Alfred, PopClip, and various window managers often rely on Full Disk Access to provide their core functionality. These developers may now face increased friction during the onboarding process as Apple pushes for a more restrictive “least-privilege” environment.
Apple has not yet specified whether existing apps with Full Disk Access will be grandfathered into the new system or if users will be forced to re-authenticate permissions upon upgrading to the next version of macOS. However, the company’s messaging suggests a broader strategy of isolating third-party AI tools while maintaining a “home-field advantage” for Apple Intelligence, which integrates directly with the operating system’s core privacy layers.
