notifyd (Notification Daemon) is a safe macOS system process. notifyd is the macOS daemon that provides the low-level notify(3) notification mechanism used for lightweight inter-process communication. Unlike distnoted (which handles higher-level NSDistributedNotifications), notifyd manages simple state-change tokens that processes use to signal events efficiently — such as timezone changes, network state changes, and DNS configuration updates. notifyd using minimal resources in the background is normal — it's a lightweight message broker. Be concerned if it shows high CPU, which indicates a process is either posting or polling notifications at an extremely high rate. This is usually a bug in a specific application rather than a notifyd issue.
Notification Daemon
notifyd is the macOS daemon that provides the low-level notify(3) notification mechanism used for lightweight inter-process communication. Unlike distnoted (which handles higher-level NSDistributedNotifications), notifyd manages simple state-change tokens that processes use to signal events efficiently — such as timezone changes, network state changes, and DNS configuration updates.
High CPU from a process rapidly checking or posting notifications
Notification token leaks causing memory growth over long uptimes
Delayed system state propagation when notifyd is overloaded
Console messages about notification registration failures
Run 'sudo notifyutil -d' in Terminal to enable debug logging for notifyd. Watch the output to see which processes are posting notifications most frequently. The most active poster is likely the cause of any performance issues.
Once you identify the app posting excessive notifications, quit and restart it. Many notification-related issues are caused by a process stuck in a notification loop that resolves when the process is restarted.
Run 'sudo killall notifyd' in Terminal. launchd will restart it immediately. This clears all registered notification tokens and forces all processes to re-register, which resolves token leak and stale registration issues.
notifyd handles notifications for system state changes (timezone, DNS, network). If these seem stuck, restarting notifyd or rebooting resolves the issue. A reboot is the most thorough fix for persistent notification propagation problems.
notifyd using minimal resources in the background is normal — it's a lightweight message broker. Be concerned if it shows high CPU, which indicates a process is either posting or polling notifications at an extremely high rate. This is usually a bug in a specific application rather than a notifyd issue.
CoreLock monitors system notification patterns and can detect when processes are using the notification system abnormally. It identifies applications that may be abusing inter-process communication channels and flags patterns consistent with inter-process signaling attacks.
Download CoreLock Freedistnoted is the macOS daemon that delivers distributed notifications between processes. When one application needs to n...
launchd is the first process that runs when macOS boots (PID 1) and serves as the system's init and service management f...
syslogd is the macOS system logging daemon that collects, stores, and manages log messages from the kernel, system servi...
notifyd is the low-level notification daemon on macOS that provides the notify(3) inter-process communication mechanism. Processes register interest in named notification tokens, and when another process posts to that token, all registered listeners are notified. It's used for lightweight system events like timezone changes, DNS updates, and network state changes.
Not directly. notifyd handles low-level system notifications between processes (invisible to users), while Notification Center (managed by usernoted) handles the user-visible notification banners and alerts. They are separate systems that serve different purposes, though some user-facing notifications may be triggered by notifyd events.
Yes. notifyd is a core Apple system daemon that has been part of macOS since the Darwin foundation. It provides essential inter-process communication infrastructure. It is code-signed by Apple, runs as a system service, and is protected by System Integrity Protection.
Download CoreLock to identify suspicious processes, detect threats, and keep your Mac running smoothly.
Download CoreLock FreeAvailable for macOS and Windows