rapportd lets your Apple devices find and talk to each other for Continuity features (its man page names Phone Call Handoff and other communication between Apple devices); it's part of macOS. If the firewall asks whether rapportd may accept incoming connections, allowing it keeps those features working, and denying it can stop some of them.
Last reviewed · 2 sources
One Mac, macOS 26.5 (25F71) on Apple silicon, read with ps and codesign on October 29, 2026
| Path | /usr/libexec/rapportd |
|---|---|
| Runs as | your user account |
| Signed by | Apple (Software Signing), identifier com.apple.rapportd |
rapportd is the macOS daemon that handles local device discovery and communication for Continuity features such as Handoff and taking iPhone calls on your Mac (its man page names Phone Call Handoff). It uses Bluetooth Low Energy (BLE) and local Wi-Fi networking to discover nearby Apple devices signed into the same Apple Account, then establishes encrypted peer-to-peer connections for seamless data transfer between them.
High CPU when many nearby Apple devices are discoverable
Network port warnings from firewalls about rapportd listening for connections
Handoff or Universal Clipboard not working between devices
Excessive Bluetooth activity draining battery on MacBooks
Go to System Settings > General > AirDrop & Continuity (AirDrop & Handoff on older macOS) and make sure 'Allow Handoff between this Mac and your iCloud devices' is on. Both devices must be signed into the same Apple Account with Bluetooth and Wi-Fi enabled.
If you don't use Handoff, Universal Clipboard, or AirPlay Receiver, disable them in System Settings to reduce rapportd's activity. This is especially useful in environments with many Apple devices (offices, classrooms).
If you use the macOS firewall or a third-party firewall and see rapportd connection prompts, allow incoming connections for rapportd. It needs to accept connections from nearby devices for Handoff and AirPlay to work.
Click the Bluetooth icon in the menu bar and toggle it off, wait 10 seconds, then re-enable it. This forces rapportd to rediscover nearby devices and often resolves Handoff or device discovery issues.
rapportd scanning for and connecting to nearby Apple devices is its normal function. Be concerned if rapportd is flagged by your firewall as attempting connections to non-local IP addresses — it should only communicate on local network and via Bluetooth. Unexpected remote connections would be abnormal.
CoreLock's free scan includes a network check that lists non-loopback listeners, so the port rapportd listens on for your other devices can appear there. A listening port alone doesn't prove another device can connect.
sharingd is the macOS daemon that handles AirDrop file transfers, Shared Computers discovery in Finder, and parts of the...
bluetoothd is the macOS daemon that manages all Bluetooth hardware and connections. It handles device pairing, maintains...
Many guides describe wifid as the Mac's Wi-Fi management daemon. On a Mac running macOS 26.5 (checked October 29, 2026) ...
Lazarus Group is a North Korean state-sponsored group attributed to the Reconnaissance General Burea...
Jamf Threat Labs described RustBucket in April 2023 and suspects a North Korean state-sponsored acto...
System Settings › Privacy & Security › Input Monitoring
rapportd is the daemon that, per its man page, enables Phone Call Handoff and other communication features between Apple devices, which Apple groups as Continuity. Apple says these features need Bluetooth and Wi-Fi turned on and every device signed in with the same Apple Account.
rapportd listens for incoming connections from your other Apple devices to enable features like AirPlay Receiver and Handoff. This is normal behavior. Allowing it in a firewall prompt keeps Continuity working; denying it can stop some of those features.
Yes. rapportd is a legitimate Apple system process that handles device-to-device communication for Apple's Continuity features. It runs for your user account from /usr/libexec/rapportd, is code-signed by Apple, and sits in a folder System Integrity Protection guards.
CoreLock's scan of running apps, network, permissions, startup items, AI agents and Downloads is free, with no account.
Apple silicon build 2.0.7 · Intel Mac?
For your Mac, not this phone ·
Count which apps can record your screen, use your mic or camera, or read your files, and get a free 0–100 estimate in your browser.
Estimate your Security ScoreFree · Calculated in your browser