Spotlight search suggestions sends data about your search to Apple and depending on your “location service” settings your location too. So this is no local search. Do web search only in your browser and disable search suggestions and make spotlight an local only search tool.

macOS 10.11 – 11.0

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Using your actual location information can be useful in some circumstance (e.g. using Maps). But it obviously enable tracking of your location. Be careful with the services/apps you allow tracking your location.

macOS 10.11 – 10.14

1. Go to “System Preferences” > “Security & Privacy” > “Privacy”
2. Select “Location Services”click the lock to make changes
3. You can totally disable location services be selecting “Enable Location services” (keep in mind you will also lose the capability to locate your Mac with the “Find my Mac” functionality.
4. or you can decide to deselect only some services
5. Check also your settings in “System Services” > “Details”
6. When you use location services, always enable “show location icon in menu bar ..” so you get notified when location services are used.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

You should mute your microphone, when not in use. This is not a 100% protection against espionage, but helps against normal accidental recording.

macOS 10.11 – 11.0

1. Go to “System Preferences” > “Sound”
2. Choose tab “Input”
3. Choose your microphone device. Normally “Line In”
4. Move the input volume slider totally to the left side.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Cookies are small text files which can store information set by a website, e.g. to remember your login name or some settings. Cookies can also be used to track your behavior. You can generally turn off, that any cookie will be stored. Be aware this can reduce the functionality of a website you visit.

macOS 10.11 – 11.0

1. Open Safari > “Preferences” > “Privacy”
2. Enable “block all cookies”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

If you do not need the Wi-Fi connection, you should switch it off. To make it easy to switch Wi-Fi off and on, enable the Wi-Fi icon in the menu bar.

macOS 10.11 – 10.14

1. Go to “System Preferences” > “Newtwork”
2. Enable “Show Wi-Fi status in menu bar”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Safari can start with restoring the last state of open windows and tabs. If you do not want, that others can see on which websites you have been in your last session, than deactivate this functionality.

macOS 10.11 – 11.0

1. Open “Safari” > “Preferences” > “General”
2. Choose in “Safari opens with:” “a new window”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Do not automatically call a “Homepage” website every time you open a new window or new tab. The website operator can collect information about your surfing behaviour.

macOS 10.11 – 11.0

1. Open “Safari” > “General”
2. “New window opens with”, “New tab opens with”: don’t use Homepage, use e.g. Favorites
3. In Homepage: empty the entry field

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

If you not actively use Bluetooth you should turn it off. Enable the Bluetooth Icon in the menu bar too, so you can always see, if you have turned it off.

macOS 10.11 – 10.14

1. Go To “System Preferences” > “Bluetooth”
2. Enable “Show Bluetooth in menu bar”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

If you not actively use Bluetooth you should turn it off. Enable the Bluetooth Icon in the menu bar too, so you can always see, if you have turned it off.

macOS 10.11 – 11.0

1. Go To “System Preferences” > “Bluetooth”
2. “Turn Bluetooth off”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Disable Adobe Acrobat Plugin in Safari. There have been several security bugs in Adobe Acrobat in the past. Safari can view PDFs too.

The Acrobat/Reader plug-in for Apple Safari is based on Netscape Plug-In API (NPAPI), which is supported only till Safari version 11. In Safari 12, support for NPAPI plug-ins is removed, and hence the current Acrobat/Reader plug-in will not work.

macOS 10.11 – 11.0

1. Open “Safari” > “Preferences”
2. 10.12-: Click the Websites button, then Internet Plug-ins: Website Settings.
3. 10.11: Click “Security” > “Plugin-Settings…”
4. Deselect “Acrobat Reader”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

If you do not need Java in Safari you should deactivate it. The Java plugin is not available with a fresh macOS installation.

macOS 10.11 – 11.0

Beginning with Safari 12 Java-Plugin is not supported anymore. More Information …

1. Open Safari > “Preferences”
2. 10.12-: Click the Websites button, then Internet Plug-ins: Website Settings.
3. 10.11: Click “Security” > “Plugin-Settings…”
4. Disable “Java”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Many browser based vulnerabilities are using JavaScript. You can disable the usage of JavaScript, but this will have effects on your browsing experience, because more and more websites use JavaScript and will not work like expected, when you disable it.

macOS 10.11 – 11.0

1. Open Safari > “Preferences” > “Security”
2. Deselect “Enable JavaScript”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

All downloads done with Safari are viewable in the download list. If you do not want that others can see, what you have downloaded, delete the list manually or automatically.

macOS 10.11 – 11.0

1. Open Safari > “Preferences” > “General”
2. Choose in “Remove download list item”: “Upon successful download”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Safari has a list of your browser usage history. You can delete it manually or automatically.

macOS 10.11 – 11.0

1. Open Safari > “Preferences” > “General”
2. Choose in “Remove history items”: “After one day”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

When you access directories with Apple Finder, hidden meta information will be written in a file named .DS_Store (Desktop Service Store). The meta information contains individual view settings for every folder and maybe sensitive information. Turn off the creation off meta data on USB devices.

macOS 10.11 – 11.0

1. Open terminal.app
2. Enter and press return:
   defaults write com.apple.desktopservices DSDontWriteUSBStores -bool true
3. Log off and log on or restart your Mac

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

When you access directories with Apple Finder, hidden meta information will be written in a file named .DS_Store (Desktop Service Store). The meta information contains individual view settings for every folder and maybe sensitive information. Turn off the creation off meta data on network stores.

macOS 10.11 – 11.0

1. Open terminal.app
2. Enter and press return:
   defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool true
3. Log off and log on or restart your Mac

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

The terminal.app supports “secure entry”. This is a technology by Apple to ensure that keyboard events and not shared with other processes. This is very important, because the terminal.app is often used for administrative tasks or for managing remote servers.

macOS 10.11 – 11.0

1. Open terminal.app
2. In menu “Terminal” select “Secure Keyboard Entry”

Technical background:

• Apple – Using Secure Event Input Fairly

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

If you use full-disk encryption (FileVault) then your encryption key is stored by default in the EFI BIOS. This helps your Mac while awake from standby/sleep. This is ok for most security requirements, but not totally secure. You can configure your Mac that the key is destroyed when going in standby/sleep mode. The disadvantage is of course, that you have to enter your FileVault password when come back from standby/sleep mode.

macOS 10.11 – 11.0

1. Open terminal.app
2. Enter and press return: sudo pmset -a destroyfvkeyonstandby 1

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.