Turn off Mac Guest User access when you do not need it

Turn off Guest User access if nobody needs temporary, password-free use of the Mac. Also turn off Allow guest users to connect to shared folders unless anonymous network access is intentional.

This is a tradeoff rather than a universal rule: Apple says guest access can help Find My locate a missing Mac if someone uses the guest browser to connect it to the internet.

macOS 13 and later

  1. Choose Apple menu > System Settings.
  2. Click Users & Groups.
  3. Click the information button beside Guest User.
  4. Turn off Allow guests to log in to this computer.
  5. Turn off Allow guest users to connect to shared folders if guest network access is not required.

You cannot change Guest User settings while a guest is logged in.

Guest User settings with local login and shared-folder access turned off

macOS 10.11 through 12

  1. Choose Apple menu > System Preferences > Users & Groups.
  2. Unlock the preference pane, then select Guest User.
  3. Deselect Allow guests to log in to this computer.
  4. Deselect Allow guest users to connect to shared folders if it is not required.
Legacy Guest User preferences with login and shared-folder access deselected

What Guest User can and cannot do

  • A guest signs in without a password, cannot change user or computer settings, and cannot log in remotely when Remote Login is off.
  • Files in the guest’s temporary home folder are deleted at logout. Do not use that folder for data that must be retained.
  • With FileVault on, Apple limits Guest User to a web browser; the guest cannot access the encrypted startup disk or create files there.
  • Local Guest User login and network guest access to shared folders are separate settings. Review both.

Primary sources

You might also be interested in

Check your security settings

SimpleumCheck Screenshot

SimpleumCheck checks the security settings on your Mac in three stages and gives you recommendations on how you can improve your security even further.

For Free

Protect and encrypt your data

SimpleumSafe Screenshot


Protect your data with SimpleumSafe App for Mac, iPhone and iPad. Don’t compromise when it comes to protecting your data.

Other security setting to check

PLEASE READ THE FOLLOWING TIP AND DISCLAIMER!

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck End User License Agreement (EULA).