Professional – Check and Fix it descriptions2018-04-13T11:51:35+02:00

Professional – Check and Fix it descriptions

Disable automatic loading of remote content by Apple Mail2020-08-20T16:36:38+02:00

Email with HTML content can load visible or invisible images (tracking pixels) when you want to read the mail. This tracking is used to know if and when you have read the email.

How to fix it

macOS 10.11 – 11.0

  1. Open “Mail” > “Preferences” > “Viewing”
  2. Deselect “Load remote content in messages”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Disable cross domain tracking in Safari2018-09-10T15:29:39+02:00

Some websites use third-party content providers. A third-party content provider can track you across websites to advertise products and services.

With this option turned on, tracking data is periodically deleted unless you visit the third-party content provider.

How to fix it

available since macOS 10.14

  1. Open Safari > “Preferences” > “Privacy”
  2. Enable “Prevent cross-site tracking”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

List of (system) daemons, agents, XPC2018-02-04T09:22:28+01:00

There are many software pieces running on your Mac. The so called “launchd” starts many of these “pieces”, so called daemons, agents and xlc services. Some are startet at boot time other on demand. On your Mac there is a kind of system and user-based list of processes running.

This informational output shows you the actual running processes controlled by launchd. For experienced users: this is a list you should check from time to time. Malicious software often tries to get permanently started utilizing launchd.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

History of Apple System Updates on you Mac2020-08-18T16:11:08+02:00

The “History of Apple System Updates on you Mac” shows you a list of Apple updates installed on your Mac. With update name, version number and date of installation.

macOS 10.11 – 11.0

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Automatically TimeMachine backups should be enabled2020-08-18T16:09:22+02:00

This is not directly a security or privacy setting, but you should frequently backup your Mac. Apples built-in backup solution “TimeMachine” is suitable for most cases.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Time Machine”
  2. Click “Select backup disk” and choose a backup device/volume
  3. Select “Back Up Automatically”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Prevent tracking by websites in Safari2020-08-18T16:05:17+02:00

You should enable “Do not track” functionality in Safari. When activated, Safari sends a “Do not track” field in the http-header (DNT: 1) when loading a web page. If the website follows this rule, it should not do any tracking, but there is no guarantee.

How to fix it

macOS 10.11 – 10.14

  1. Open Safari > “Preferences” > “Privacy”
  2. Enable “Ask websites not to track me”

This option does not exists anymore (macOS 10.14.4+).

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

An administrator password is required to change system wide preferences2020-08-18T15:53:46+02:00

Changes to your system wide preferences should require an administration password. This forces extra awareness and access right checks.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Security & Privacy”
  2. “click the lock to make changes”
  3. Click on “Advanced…”
  4. Enable “Require an administrator password to access system-wide preferences”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Apple Remote events should be disabled2020-08-18T15:44:06+02:00

If you enable Remote Apple Events (RAE), you allow your computer to respond to events sent by other computers on your network. These events include AppleScript programs. There should normally no need to enable this service.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Sharing”
  2. Disable “Apple Remote Events”
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Dont run local webserver2020-08-18T15:41:26+02:00

There should be no normal reason to run a local web server. If you are a developer, disable this check, otherwise disable the web server. Hosting a web server securely requires a lot of knowledge.

How to fix it

macOS 10.11 – 11.0

  1. Open terminal.app
  2. Enter and press return:
    
    
    sudo launchctl unload -w /System/Library/LaunchDaemons/org.apache.httpd.plist

This will stop the local web server and it will not start after reboot again.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Bluetooth sharing should be disabled2020-08-18T15:36:57+02:00

There should be normally no need to share your Bluetooth.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Sharing”
  2. Disable “Bluetooth Sharing”
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

DVD and CD sharing should be disabled2018-09-10T15:35:41+02:00

Sharing your CD/DVD device can be useful, when you access a Mac with a DVD device from Macs without. But disabling this sharing can be easily forgotten, and others may can read your CD/DVD.

How to fix it

macOS 10.11 – 10.14

  1. Go to “System Preferences” > “Sharing”
  2. Disable “DVD or CD Sharing”
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Internet sharing should be disabled2020-08-18T15:38:16+02:00

Nowadays there should be no need to share an internet connection. This normally unnecessarily opens network ports and services which gives an attacker more chances to attack you.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Sharing”
  2. Disable “Internet Sharing”
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Dont respond to ICMP ping network requests (Firewall in stealth mode)2020-08-18T12:03:43+02:00

Normally every computer in a network response to a ping request. This is often used to know if a computer or server is reachable. Many attacks start with a network scan: try to ping every IP address in the network, to know on which IP address a computer is available. Normally there should be no reason to respond to ping requests.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Security & Privacy” > “Firewall”
  2. “Click on lock to make changes”
  3. Click on “Firewall options”
  4. Enable “Enable stealth mode”

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Dont show your computer name while screen saver is running2018-09-10T15:37:56+02:00

There is no need to show your computer name while the screen saver is running. But some screen savers have this as a default. An attacker get knowledge which computer in the network is yours.

How to fix it

macOS 10.11 – 10.14

  1. Go to “System Preferences” > “Desktop & Screen Saver”
  2. If the chooser Screen Save has options, then check and change the option, that your computer name is not shown.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Hostname should not contain your name2020-08-18T11:37:30+02:00

Your user name and password are very important to get into your Mac. Knowing or good guessing of your user name is important for every attacker. Do not use your user name or full name as your computer name. It is easy to discover your computer name.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Sharing”
  2. Choose a new Computer name (and network name)
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

A firmware password should be set2020-08-18T11:31:42+02:00

Setting a firmware password ensures, that your Mac will only start from your startup disk and not from any other internal or external disks. Normally you will not be asked to enter the firmware password at boot time, only when you try to boot from a different drive or DVD.

To boot in special modes like: recovery mode and single user mode the firmware password is required too.

How to fix it

macOS 10.11 – 11.0

  1. Turn off your Mac
  2. Go into Recovery Mode by immediately holding down the Command and R keys after power on.
  3. Wait until the Utilities screen appears.
  4. Click on the Utilities menu from the menu bar.
  5. Select Firmware Password Utility.
  6. Click on the Turn On Firmware Password…
  7. Enter a new password, verify it and click the Set Password button.
  8. Click on Quit Firmware Password Utility
  9. Restart you Mac.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Wake on LAN/WLAN access should be disabled2020-08-18T11:30:22+02:00

Wake on network access (commonly known as Wake on Lan, WOL) enables your Mac to automatically start after a special prepared network package was sent to your Mac. While this is very comfortable for remote management or awaking network attached storage, from a security perspective this should be disabled.

Imagine your Mac is in sleep mode over night. An attacker starts your Mac and has the whole night time to attack your Mac before you are able to realize it. If you put your Mac in sleep mode or turn it off, you should be sure it does so.

How to fix it

macOS 10.11 – 11.0

  1. Go to “System Preferences” > “Energy Saver”
  2. Deselect “Wake for Ethernet network access” (Ethernet or network or Wi-Fi)

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

FileVault should not have an institutional recovery key2020-08-18T11:15:46+02:00

FileVault has an institutional recovery key: Your full-disk encryption can be recovered with a recovery key. An institutional recovery key is normally created by a central company computer management system. If your Mac is not part of such a system and you don’t have created the recovery key on your own, then change it. If this Mac is a company, school .. Mac, then don’t change it. There might be compliance reasons why this is configured.

Create a personal recovery key and remove the institutional recovery key.

How to fix it

macOS 10.11 – 11.0

  1. open terminal.app
  2. Enter and press return: sudo fdesetup removerecovery -institutional
  3. Enter the administrator password
  4. Create a personal Recovery key

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

You should have a personal recovery key for FileVault2020-08-18T11:11:58+02:00

If you have forgotten you FileVault password you can recover your encrypted data with a recovery key, but there was no recovery key created. You should immediately create a recovery key.

How to fix it

macOS 10.11 – 11.0

  1. Open terminal.app
  2. Enter and press return: sudo fdesetup changerecovery -personal
  3. Enter the administrator password
  4. Enter your password (both are on most single user Mac the same)
  5. Write down the recovery key (write it on paper or an other location, but not on your Mac)

Example Output:

Password:
Enter your password:
New personal recovery key = 'GKF2-BXMK-WUEJ-JT76-J7ZK-47MO'

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Printer Sharing should be disabled2018-09-10T15:43:37+02:00

You can share your printer with another Mac or with a UNIX computer. Every not needed service other computers can connect to your Mac should be disabled.

How to fix it

macOS 10.11 – 10.14

  1. Go to “System Preferences” > “Sharing”
  2. Disable “Printer Sharing”
Sharing Preferences

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Do not automatically save new Documents in iCloud2020-08-18T11:08:05+02:00

Apps, which support iCloud document storage, are automatically stored on iCloud before they are first manually saved (without asking you). For example TextEdit.app. You should definitely deactivate this.

How to fix it

macOS 10.11 – 11.0

  1. Open the terminal.app
  2. Enter and press return:
    defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
  3. You have to log out and in again or to reboot to make this change effective.

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck Terms and Conditions.

Go to Top