To see which apps can open files in your Desktop, Documents and Downloads folders, iCloud Drive and network volumes, open System Settings › Privacy & Security › Files & Folders. Each app has a switch for each location, so turn off the ones it doesn't need.
Last reviewed · 2 sources
Where to find it
System Settings › Privacy & Security › Files & Folders
Since macOS 10.15, apps need your consent before they open files in Documents, Downloads, Desktop, iCloud Drive and network volumes. Files & Folders is where those answers are kept, one switch per app and location. Unlike Full Disk Access, it doesn't open other apps' data such as Mail or Messages.
Choose Apple menu > System Settings, then click Privacy & Security in the sidebar.
Each app is listed with the locations it asked for, such as Desktop, Documents and Downloads, each with its own switch.
A code editor may need Documents but not Downloads. A screenshot tool may need only Desktop.
You can allow Desktop and deny Documents for the same app.
If the app needs the folder later, it asks again, and you can decide then.
CoreLock's free Privacy report covers Screen Recording, Accessibility, Full Disk Access, Input Monitoring, camera and microphone. Full Disk Access is in that report; for Files & Folders, use System Settings.
ClickFix is a social-engineering technique that MITRE ATT&CK lists as User Execution: Malicious Copy...
Cado Security (now part of Darktrace) found Cthulhu Stealer rented out by the 'Cthulhu Team' over Te...
Genieo is a browser hijacker that behaves like adware: it acts as a search engine that shows sponsor...
MITRE ATT&CK describes Proton as a macOS backdoor focused on data theft and credential access; it wa...
Files & Folders covers named locations, with a switch for each: Desktop, Documents, Downloads, iCloud Drive and network volumes. Full Disk Access adds other apps' data such as Mail, Messages and Safari, Time Machine backups and some settings for every user. Prefer Files & Folders when it's enough.
Editors read and write the projects you keep in Documents or on the Desktop. Allow the location your code lives in and leave the others off.
Not with these switches: each covers a whole location, such as all of Documents. If an app only needs one project, keep that project in a location you're happy to allow and leave the others off.
The Privacy report and the scan are free, with no account, on macOS 13 or later.
Apple silicon build 2.0.7 · Intel Mac?
For your Mac, not this phone ·
Count the apps with Screen Recording, Accessibility, Full Disk Access, Microphone and Camera access in System Settings, and get a free 0–100 estimate in your browser.
Estimate your Security ScoreFree · Calculated in your browser