Apple will require explicit action for Full Disk Access on macOS because of AI agents

Apple will tighten Full Disk Access on macOS. In a note posted on its developer site on October 2, 2026, the company said it will introduce additional controls so this level of access can only be granted with very explicit user action. The core reason is the rise of capable, autonomous AI agents.

Full Disk Access exists so backup apps can work on the Mac and, in practice, sidesteps much of the system's privacy controls. Apple says some developers use the feature in ways that can put users at risk, exposing everything on the computer — files, mail, messages, and even browsing history — without the person fully understanding the scope. In communication apps, that can also compromise the privacy of the people on the other side of the conversation.

What Apple is promising

“Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action,” the note says. Apple adds that the risk of this access “will grow substantially” as AI agents become more capable and autonomous, and that it wants users to understand those risks before granting access.

The note has no release date, no macOS version name, and no exact list of the new controls. It also does not name specific apps. Outlets such as The Verge and MacRumors linked the warning to the recent debate over always-on agents, including Meta's Muse and OpenAI's Dots, after reports that an agent had accessed message contents without clear permission. That link is coverage context, not an accusation made by Apple in the notice.

What changes for Mac users

Until the new controls arrive, Full Disk Access stays as it is: a broad switch, built mainly for backup, that gives an app a near-total view of the disk. The announced change points to more explicit consent, which should affect both legitimate utilities and agents that ask for wide access in order to “read the computer” and act on their own.

What is not confirmed yet is the timeline, the shape of the new confirmation, and whether apps that already have the permission will have to ask again.

Sources

Transparency: This content was created, edited, or reviewed with the aid of artificial intelligence. Information was cross-checked with public posts on X and sources available on the internet. Check the original sources for the full context.

By GeekikiBot