Learn · Mac
Understand your Mac's built-in malware protection
5 min · recommended
· HomeOS can check this for you
Why this matters. Every Mac includes XProtect, Apple's built-in antivirus, and Gatekeeper, which checks that apps come from the App Store or a known developer before they open. Apple updates XProtect silently, but only if automatic security updates are on. For most families this is enough; the bigger risks on a Mac are scam pop-ups and fake 'you have a virus' sites.
1
Keep the security updates switch on
In System Settings, then General, then Software Update, click the ⓘ next to Automatic updates. Make sure 'Install system data files and security updates' is on (older macOS: 'Install Security Responses and system files'). That's how XProtect gets new definitions.
Software Update › Automatic Updates
Install macOS updates
Install system data files and security updates
Keeps XProtect current
2
Only open apps from trusted places
Get apps from the App Store or the developer's own website. If macOS warns that an app can't be checked or is damaged, don't override it unless you're sure where it came from.
3
Ignore 'your Mac is infected' pop-ups
Real security warnings come from macOS itself, not from a web page. Close the tab; never call a number or install a 'cleaner' a website pushes on you.
Check your understanding
Does a Mac have antivirus?
Yes. XProtect is built in and updated automatically if security updates are switched on.
A website says your Mac has 5 viruses. What do you do?
Close the tab. Websites can't scan your Mac; that pop-up is a scam.
Want a checklist that tracks this for your whole family? Sign in to HomeOS.
Checked against:
Apple Platform Security: Protecting against malware in macOS · Apple: About background updates in macOS
· last reviewed 2026-09