privacy.sexyRevamped

macOS privacy and hardening script catalog

The full index of what the macOS collection can change, grouped the way the script builder groups it. Every entry is a tweak you can select, read as plain commands, and download as one script that runs locally.

Build a macOS script →

macOS ships fewer switches than Windows, and Apple removes or renames the ones it does ship without notice, so this collection is smaller and more conservative by design. It covers Apple diagnostic and usage data, Siri and its dictation and analytics surfaces, Safari configuration, application privacy permissions, log and cache clearing, the application firewall and stealth mode, guest accounts, screen-saver locking, and printer and remote sharing services.

The Opt-in only tag matters more here than anywhere else. Disabling Gatekeeper or File Quarantine removes the checks that stop unsigned and downloaded code from running, and those entries exist so the option is documented rather than recommended. Anything needing System Integrity Protection turned off is out of scope entirely.

Privacy cleanup

  • Clear CUPS printer job cache Opt-in only
  • Empty current user's trash Opt-in only
  • Empty trash on all volumes Opt-in only
  • Clear system cache Opt-in only
  • Clear Xcode's derived data and archives Opt-in only
  • Clear DNS cache Opt-in only
  • Remove Guest User Opt-in only

Clear terminal history

  • Clear bash history Opt-in only
  • Clear zsh history Opt-in only

Clear system and app logs

  • Clear Apple System Logs (ASL) Opt-in only
  • Clear installation logs Opt-in only
  • Clear all system logs Opt-in only
  • Clear system application logs Opt-in only
  • Clear user application logs Opt-in only
  • Clear Mail app logs Opt-in only
  • Clear user activity audit logs (login, logout, authentication, etc.) Opt-in only
  • Clear system maintenance logs Opt-in only
  • Clear app installation logs Opt-in only

Clear system and app logs › Clear unified system and app logs

  • Clear diagnostic logs Opt-in only
  • Clear diagnostic log details Opt-in only

Clear browser history › Clear Chrome Default-profile history

  • Clear Chrome browsing history Opt-in only
  • Clear Chrome Default-profile cache Opt-in only

Clear browser history › Clear Safari history

  • Clear Safari browsing history Opt-in only
  • Clear Safari downloads history Opt-in only
  • Clear Safari frequently visited sites Opt-in only
  • Clear Safari last session (open tabs) history Opt-in only
  • Clear Safari history copy Opt-in only
  • Clear search term history embedded in Safari preferences Opt-in only
  • Clear Safari cookies Opt-in only
  • Clear Safari zoom level preferences per site Opt-in only
  • Clear allowed URLs for Safari notifications Opt-in only
  • Clear Safari preferences for downloads, geolocation, pop-ups, and autoplay per site Opt-in only

Clear browser history › Clear Safari history › Clear Safari caches

  • Clear Safari cached blobs, URLs and timestamps Opt-in only
  • Clear Safari URL bar web page icons Opt-in only
  • Clear Safari webpage previews (thumbnails) Opt-in only

Clear browser history › Clear Firefox history

  • Clear Firefox cache Opt-in only
  • Clear Firefox form history Opt-in only
  • Clear Firefox site preferences Opt-in only
  • Clear Firefox session restore data (loads after the browser closes or crashes) Opt-in only
  • Clear Firefox passwords Opt-in only
  • Clear Firefox HTML5 cookies Opt-in only
  • Clear Firefox crash reports Opt-in only
  • Clear Firefox backup files Opt-in only
  • Clear Firefox cookies Opt-in only

Clear third-party application data

  • Clear Adobe cache Opt-in only
  • Clear Gradle cache Opt-in only
  • Clear Dropbox cache Opt-in only
  • Clear Google Drive File Stream cache Opt-in only
  • Clear Composer cache Opt-in only
  • Clear Homebrew cache Opt-in only
  • Clear old Ruby gem versions Opt-in only
  • Clear unused Docker data Opt-in only
  • Clear Pyenv-Virtualenv cache Opt-in only
  • Clear NPM cache Opt-in only
  • Clear Yarn cache Opt-in only

Clear iOS usage data

  • Clear iOS Device Backups Opt-in only
  • Clear iOS simulators Opt-in only
  • Clear list of connected iOS devices Opt-in only

Clear application privacy permissions

  • Clear **"All"** permissions Opt-in only
  • Clear "Camera" permissions Opt-in only
  • Clear "Microphone" permissions Opt-in only
  • Clear "Accessibility" permissions Opt-in only
  • Clear "Screen Capture" permissions Opt-in only
  • Clear "Reminders" permissions Opt-in only
  • Clear "Photos" permissions Opt-in only
  • Clear "Calendar" permissions Opt-in only
  • Clear "Full Disk Access" permissions Opt-in only
  • Clear "Contacts" permissions Opt-in only
  • Clear "Desktop Folder" permissions Opt-in only
  • Clear "Documents Folder" permissions Opt-in only
  • Clear "Downloads Folder" permissions Opt-in only
  • Clear "Apple Events" permissions Opt-in only
  • Clear "File Provider Presence" permissions Opt-in only
  • Clear "Listen Events" permissions Opt-in only
  • Clear "Media Library" permissions Opt-in only
  • Clear "Post Event" permissions Opt-in only
  • Clear "Speech Recognition" permissions Opt-in only
  • Clear "App Modification" permissions Opt-in only
  • Clear "Application Data" permissions Opt-in only
  • Clear "Network Volumes" permissions Opt-in only
  • Clear "Removable Volumes" permissions Opt-in only
  • Clear "System Administration Files" permissions Opt-in only

Configure programs

  • Disable Firefox telemetry Recommended
  • Disable Microsoft Office telemetry Recommended
  • Remove Google Software Update service Opt-in only
  • Disable Homebrew user behavior analytics Recommended
  • Disable NET Core CLI telemetry Recommended
  • Disable PowerShell Core telemetry Recommended

Configure Safari

  • Disable Safari search engine suggestions Recommended
  • Disable Safari Spotlight suggestions Recommended
  • Disable automatic opening of downloaded files in Safari Recommended

Configure Parallels Desktop

  • Disable Parallels Desktop advertisements Recommended

Configure OS

  • Disable online spell correction Opt-in only
  • Disable remote Apple events Strict
  • Disable Apple content caching Opt-in only
  • Disable wake for network access during sleep Strict
  • Disable Power Nap during sleep Strict
  • Disable automatic storage of documents in iCloud Drive Recommended
  • Disable display of recent applications on Dock Opt-in only
  • Disable AirDrop file sharing Strict
  • Disable Spotlight indexing Opt-in only
  • Disable personalized advertisements and identifier tracking Recommended
  • Disable date and time in screenshot filenames Strict

Minimize Apple data collection

  • Disable Siri data sharing Recommended
  • Disable Spotlight lookup suggestions Recommended
  • Disable automatic crash report submission Recommended
  • Disable Handoff and Continuity Strict

Configure Apple Remote Desktop

  • Disable remote management service Opt-in only
  • Remove Apple Remote Desktop Settings Opt-in only

Configure Siri › Disable Siri

  • Disable "Ask Siri" Strict
  • Disable Siri voice feedback Strict
  • Disable Siri services (Siri and assistantd) Opt-in only
  • Disable "Do you want to enable Siri?" pop-up Opt-in only

Configure Siri › Remove Siri from user interface

  • Remove Siri from status menu Strict

Security improvements

  • Disable captive portal detection Opt-in only

Configure macOS Application Firewall

  • Enable application firewall Recommended
  • Enable firewall logging Recommended
  • Enable stealth mode Recommended

Configure macOS Application Firewall › Disable automatic permission for incoming traffic in applications

  • Disable automatic incoming connections for signed apps Strict
  • Disable automatic incoming connections for downloaded signed apps Strict

Enable protective screen saver

  • Enable password requirement for waking from sleep or screen saver Opt-in only
  • Enable session lock five seconds after screen saver initiation Opt-in only

Disable guest accounts

  • Disable guest account login Strict
  • Disable guest file sharing over SMB Opt-in only
  • Disable guest file sharing over AFP Opt-in only

Disable unauthorized connections

  • Disable incoming SSH and SFTP remote logins Recommended
  • Disable the insecure TFTP service Opt-in only
  • Disable Bonjour multicast advertising Opt-in only
  • Disable insecure telnet protocol Opt-in only

Disable printer sharing (IPP, LDP, SMB and Bonjour protocols)

  • Disable local printer sharing with other computers Recommended
  • Disable printing from external addresses, including the internet Recommended
  • Disable remote printer administration Recommended

Privacy over security

  • Disable library validation entitlement (library signature validation) Opt-in only

Disable File Quarantine (tracks downloaded files and warns) › Clean File Quarantine from downloaded files

  • Clear logs of all downloaded files from File Quarantine Opt-in only
  • Clear File Quarantine attribute from downloaded files Opt-in only

Disable File Quarantine (tracks downloaded files and warns) › Disable macOS File Quarantine tracking for downloaded files

  • Disable downloaded file logging in quarantine Opt-in only
  • Disable extended quarantine attribute for downloaded files (disables warning) Opt-in only

Disable Gatekeeper (enforces code-signing)

  • Disable Gatekeeper's automatic reactivation Opt-in only
  • Disable Gatekeeper Opt-in only

Disable automatic updates

  • Disable automatic checks for updates Opt-in only
  • Disable automatic downloads for updates Opt-in only
  • Disable automatic installation of macOS updates Opt-in only
  • Disable automatic app updates from the App Store Opt-in only
  • Disable macOS beta release installation Opt-in only
  • Disable automatic installation for configuration data (e.g. XProtect, Gatekeeper, MRT) Opt-in only
  • Disable automatic installation for system data files and security updates Opt-in only