Now it's the time to secure your Mac from either data thieves or network hackers. These are the basic settings you can make to secure your Mac:
Securing Accounts
There are several things to be aware of when you're choosing options for your login items, such as disabling automatic login or hiding available usernames.
Here is the complete steps to secure your login:
- Go to Apple ▸ System Preferences inside Accounts
- Click on the Lock to make changes
- Choose Login Options
- Disable automatic login, so strangers will require password to access into your Mac
- Hide list of users by choosing Display login window as Name and password. So even though some data thieves can lure you away from your Mac, they won't get any hints to enter your account
- Don't show Restart, Sleep, and Shut Down buttons
- Don't give Password Hints. I believe you will remember your password
Securing Sleeping Mac
If you have used your Mac for quite a long time, you'd prefer let your Mac sleep rather than shut it down when you're away. This is when securing sleeping Mac becomes essential. So you will need to set your Mac to ask for password whenever someone wakes your Mac up.
Here is how to set it:
- Go to Apple ▸ System Preferences under Security pane
- Click on General section
- Enable password prompt to wake computer from sleep or screen saver, which is done by ticking the first checkbox
- You can also enable automatic log out after several minutes you away from your Mac by ticking the checkbox labelled Log out after x minutes of inactivity
Securing Keychain Access
Keychain login password is set by default the same as your account login password. So if somehow someone knows your password, that person will also know all passwords for your entire application, either it's IM or even your Mail.
Don't let this happen. The only way out is by differentiating your keychain and your Mac password. Here is how to do it:
- Go inside Finder: Applications ▸ Utilities
- Open Keychain Access
- Choose Keychain Access: Edit ▸ Change Password for Keychain Login
- Fill in all the requirements field. The good thing here is, you can see your password strength when entering new keychain login password
- Confirm your changes and try not to forget your new password
But of course, the better solution is not to let strangers know your login password.
Don't Give Permission Easily
Before doing any changes to your Mac, your Mac will prompt a login window asking for your password. This is meant to give your more control over your account.
If you got window prompted asking your password out of the blue, don't give it out if you don't really know what's happening. Maybe it's a malware..
Keep Your Mac Up To Date
Most of the time, Apple will release patches for potential security issues. So make sure you check for updates daily. Or, you can have your Mac to check it daily for you:
- Go to Apple ▸ System Preferences..
- Choose Software Update pane
- Click on Scheduled Check section
- Enable check for updates and enable download important updates automatically
- Select Daily checking for updates
There is something you need to take note, if there exists new version of your Mac OS X in Software Update List, make sure you check on forums to see whether any issues encountered during updating.
Controlling Screen Sharing
In Leopard, you can do screen sharing. This is a mixed blessing: You can share your screen as you want but also strangers can access and control your screen.
So you need to handle screen sharing permission: only to enable it with your permission. How to do it?
- Go to Apple ▸ Preferences..
- Choose Sharing
- Click on Screen Sharing
- Near the notification Screen Sharing: On, you will see Computer Settings.. button. Pop up menu will appear when you clicked on it
- Disable allowance for VNC viewers with password while enabling anyone may request permission. This way, in order to control your screen, everyone should get your permission first
Building Strong Firewall
Firewall is turned on by your Mac default setting. But for the sake of completeness, maybe you are interested in applying Stealth Mode for your Mac: To make your Mac hidden beneath the wall.
- Open to System Preferences: Apple ▸ Preferences..
- Choose Security and Go to Firewall section
- Allow only essential services by choosing the second radio button
- Click on Advanced.. button to reveal pop-up menu
- Enable Stealth Mode where your Mac will give no response unexpected traffic source
Backup Often
The easiest way to make backup is by using feature introduced by Leopard: Time Machine. After setting backup drive for the first time, your Mac will automatically do the backup for you.
But if you choose to backup manually, you can use Carbon Copy Cloner and/or Super Duper as discussed in my earlier post: Make Mac Backup.
Encrypting Sensitive Data with FileVault
If your data can do harm to your business, you should consider turning on FileVault. With FileVault, your Home folder will be encrypted so that unauthorized users can't access those data.
So even though your Mac is stolen, the thieves cannot access your files. But be careful, if you lost your login password and master password, your data will be lost forever (as shown in the warning).
To turn on FileVault:
- Open System Preferences
- Go to Security Preferences Pane and choose FileVault section
- Set Master Password first
- Turn On FileVault. It will take a while to turn on your FileVault and keep in mind that you need harddisk free space as big as your Home folder size for temporary use while encrypting data
- You will be logged out during encryption process
Visiting UsingMac.com Often
It's obvious, right?
One last thing, currently we got no virus on Mac, but who knows that someday some malevolent enterprises will create one. So my advise, keep up to date, especially on security issues, and stay low profile.
6 COMMENTS (RSS)
David
June 17th, 2008 Time: 11:18 AM
Love the last tip
Mac tips
June 30th, 2008 Time: 01:23 PM
Great list of tips! By default the Mac is pretty secure from external threats like viruses and trojans, but it's always a good idea to implement some simple things to help protect your Mac. I reproduced my favorite two tips (Requiring login on boot and on system wake) and linked back to this list from a blog post I just wrote. Good stuff! - Bill Ellis
MAC Lovers
July 9th, 2008 Time: 03:29 AM
Great Tips. Especially Securing Sleeping MAC. Thanks.
Hamble
July 13th, 2008 Time: 03:28 AM
Good tips – but I'd just like to emphasise the importance of enabling FileVault or similar encryption software to protect the most sensitive data on your hard disk, as it is very easy to get at all unencrypted data on a Mac laptop using Target Disk mode on startup from another computer. While there is a way of disabling Target Disk mode, even this isn't foolproof to anyone who knows what they're doing and is determined enough. Strong encryption is the only surefire way of keeping data safe from everyone but super-computer owners with a lot of time on their hands.
Sebastian Lewis
September 8th, 2008 Time: 03:40 PM
NO! Don't enable VileFault! Seriously, this thing is a hassle, every time you shut down you have to reclaim space, it continues to eat up space, it slows down your Mac, and it encrypts your data with the same password that you use to login, so if someone has that, they have your data anyway. All it does is move your ~ folder to an encrypted DMG, if you do have really sensitive data, then create an encrypted DMG yourself in Disk Utility, give it a different password than your login password, and move the data into that. This has the added benefit of being portable, you can use 256 bit AES encryption (if I remember correctly VileFault only uses 128 bit AES) that is not the same as your login password, and it can have a file hierarchy that's entirely separate from your "main" file hierarchy. Sebastian
butterworm
September 14th, 2008 Time: 09:08 PM
adding to the case against filevault - encryption and decryption are performed on the fly, while you use the computer, so unless you have a super cool mac pro with heaps of ram on board, your computer will be significantly slower with filevault enabled. also, when you empty the trash, you have to log out, and then wait for a while, while mac os x recovers the unused portion of the hard drive. as if that weren't enough, every time the trash is emptied, it is securely emptied, unless you specifically tell the computer otherwise on a case by cases basis. secure empty trash is secure, but is very slooow. i was told by an apple rep that the reason filevault exists is because it is a requirement of apple's supply contract with the US military, which is fair enough. my two cents - unless you have military level data that would bring companies or governents down if made public, filevault is not for you. the cons far outweigh the pros. there are better solutions for most users.
LEAVE.A.COMMENT