UsingMac.com

All About Apple Mac

Now it's the time to secure your Mac from either data thieves or network hackers. These are the basic settings you can make to secure your Mac:

Securing Accounts

There are several things to be aware of when you're choosing options for your login items, such as disabling automatic login or hiding available usernames.

Here is the complete steps to secure your login:

  1. Go to Apple ▸ System Preferences inside Accounts
  2. Click on the Lock to make changes
  3. Choose Login Options
  4. Disable automatic login, so strangers will require password to access into your Mac
  5. Hide list of users by choosing Display login window as Name and password. So even though some data thieves can lure you away from your Mac, they won't get any hints to enter your account
  6. Don't show Restart, Sleep, and Shut Down buttons
  7. Don't give Password Hints. I believe you will remember your password

Mac Security

Securing Sleeping Mac

If you have used your Mac for quite a long time, you'd prefer let your Mac sleep rather than shut it down when you're away. This is when securing sleeping Mac becomes essential. So you will need to set your Mac to ask for password whenever someone wakes your Mac up.

Here is how to set it:

  1. Go to Apple ▸ System Preferences under Security pane
  2. Click on General section
  3. Enable password prompt to wake computer from sleep or screen saver, which is done by ticking the first checkbox
  4. You can also enable automatic log out after several minutes you away from your Mac by ticking the checkbox labelled Log out after x minutes of inactivity

Mac Security

Securing Keychain Access

Keychain login password is set by default the same as your account login password. So if somehow someone knows your password, that person will also know all passwords for your entire application, either it's IM or even your Mail.

Don't let this happen. The only way out is by differentiating your keychain and your Mac password. Here is how to do it:

  1. Go inside Finder: Applications ▸ Utilities
  2. Open Keychain Access
  3. Choose Keychain Access: Edit ▸ Change Password for Keychain Login
  4. Fill in all the requirements field. The good thing here is, you can see your password strength when entering new keychain login password
  5. Confirm your changes and try not to forget your new password

But of course, the better solution is not to let strangers know your login password.

Mac Security

Don't Give Permission Easily

Before doing any changes to your Mac, your Mac will prompt a login window asking for your password. This is meant to give your more control over your account.

If you got window prompted asking your password out of the blue, don't give it out if you don't really know what's happening. Maybe it's a malware..

Keep Your Mac Up To Date

Most of the time, Apple will release patches for potential security issues. So make sure you check for updates daily. Or, you can have your Mac to check it daily for you:

  1. Go to Apple ▸ System Preferences..
  2. Choose Software Update pane
  3. Click on Scheduled Check section
  4. Enable check for updates and enable download important updates automatically
  5. Select Daily checking for updates

Mac Security

There is something you need to take note, if there exists new version of your Mac OS X in Software Update List, make sure you check on forums to see whether any issues encountered during updating.

Controlling Screen Sharing

In Leopard, you can do screen sharing. This is a mixed blessing: You can share your screen as you want but also strangers can access and control your screen.

So you need to handle screen sharing permission: only to enable it with your permission. How to do it?

  1. Go to Apple ▸ Preferences..
  2. Choose Sharing
  3. Click on Screen Sharing
  4. Near the notification Screen Sharing: On, you will see Computer Settings.. button. Pop up menu will appear when you clicked on it
  5. Disable allowance for VNC viewers with password while enabling anyone may request permission. This way, in order to control your screen, everyone should get your permission first

Mac Security

Building Strong Firewall

Firewall is turned on by your Mac default setting. But for the sake of completeness, maybe you are interested in applying Stealth Mode for your Mac: To make your Mac hidden beneath the wall.

  1. Open to System Preferences: Apple ▸ Preferences..
  2. Choose Security and Go to Firewall section
  3. Allow only essential services by choosing the second radio button
  4. Click on Advanced.. button to reveal pop-up menu
  5. Enable Stealth Mode where your Mac will give no response unexpected traffic source

Mac Security

Backup Often

The easiest way to make backup is by using feature introduced by Leopard: Time Machine. After setting backup drive for the first time, your Mac will automatically do the backup for you.

Mac Security

But if you choose to backup manually, you can use Carbon Copy Cloner and/or Super Duper as discussed in my earlier post: Make Mac Backup.

Encrypting Sensitive Data with FileVault

If your data can do harm to your business, you should consider turning on FileVault. With FileVault, your Home folder will be encrypted so that unauthorized users can't access those data.

So even though your Mac is stolen, the thieves cannot access your files. But be careful, if you lost your login password and master password, your data will be lost forever (as shown in the warning).

Mac Security

To turn on FileVault:

  1. Open System Preferences
  2. Go to Security Preferences Pane and choose FileVault section
  3. Set Master Password first
  4. Turn On FileVault. It will take a while to turn on your FileVault and keep in mind that you need harddisk free space as big as your Home folder size for temporary use while encrypting data
  5. You will be logged out during encryption process

Visiting UsingMac.com Often

It's obvious, right?

One last thing, currently we got no virus on Mac, but who knows that someday some malevolent enterprises will create one. So my advise, keep up to date, especially on security issues, and stay low profile.

4 COMMENTS (RSS)

David

June 17th, 2008 Time: 11:18 AM

Love the last tip

1

Mac tips

June 30th, 2008 Time: 01:23 PM

Great list of tips! By default the Mac is pretty secure from external threats like viruses and trojans, but it's always a good idea to implement some simple things to help protect your Mac. I reproduced my favorite two tips (Requiring login on boot and on system wake) and linked back to this list from a blog post I just wrote. Good stuff! - Bill Ellis

2

MAC Lovers

July 9th, 2008 Time: 03:29 AM

Great Tips. Especially Securing Sleeping MAC. Thanks.

3

Hamble

July 13th, 2008 Time: 03:28 AM

Good tips – but I'd just like to emphasise the importance of enabling FileVault or similar encryption software to protect the most sensitive data on your hard disk, as it is very easy to get at all unencrypted data on a Mac laptop using Target Disk mode on startup from another computer. While there is a way of disabling Target Disk mode, even this isn't foolproof to anyone who knows what they're doing and is determined enough. Strong encryption is the only surefire way of keeping data safe from everyone but super-computer owners with a lot of time on their hands.

4

LEAVE.A.COMMENT

Your Name:

Your Email:

Your Website: