Do You Need Antivirus on a Mac? What macOS Already Does and What It Does Not

Macs are not immune to malware, but they are built differently from the PCs that antivirus software was first made for. Apple builds protection into macOS, and for many people that, plus a few good habits, is enough. This guide explains what macOS already does, where the real risk now sits and when we recommend extra protection.

What macOS already does

Our 2018 guide explained the main built-in protections, and they remain part of macOS. Gatekeeper blocks software that has not been digitally approved by Apple from running on your Mac without your agreement. XProtect is a malware scanner that works in the background and updates automatically. Apps from the Mac App Store are kept apart from the critical parts of macOS, your data and your other apps. And Safari can warn you before you visit a fraudulent website, if you leave that setting on.

Where the risk has moved

Attackers increasingly try to trick people into running harmful commands or software.

A common version is a web page that says you must prove you are human by pasting a command into Terminal. A genuine website never needs you to do that. Never run a command that a web page, email, message or chat tells you to paste.

macOS 26.4 and later added three protections against this. Terminal paste protection shows a warning when you paste into Terminal from a browser, Messages, Mail or a messaging app, if you have not opened Terminal for more than 30 days and no common developer tools are installed. Pasteboard command blocking watches what a pasted command does and where it connects to, and blocks it if it matches known malware. AppleScript scanning inspects scripts as they run.

If your Mac shows a “Possible malware, Paste blocked” alert, your Mac has not been harmed. Do not paste the command unless you are certain what it does and where it came from. These protections help, but they cannot stop you approving something yourself.

Do you need antivirus software?

Our view is that a home user who keeps macOS updated, installs apps from the App Store or from known developers and follows the habits below usually does not need to pay for extra antivirus.

A business that handles sensitive information should use managed security software that someone monitors. For a business, confirm any security requirements in your insurance policy and client contracts before choosing protection.

Be careful with free “cleaner” and “antivirus” downloads promoted through ads. The safest way to download apps is from the App Store. If you need software that is not there, get it directly from the developer or another reliable source, not through an ad or a link.

The habits that matter most

Keep macOS and your apps up to date. Install apps from the App Store or directly from the developer, and do not override a Gatekeeper warning unless you trust the app. Never paste a Terminal command from a web page, email, message or chat. Be cautious with unexpected password prompts, use two-step sign-in and a password manager, and keep a tested backup.

If you think you ran something harmful

Disconnect your Mac from the internet and do not enter your password into any prompt that appears. From a different, trusted device, change the passwords for your important accounts, starting with your Apple Account and your email. Then contact us before you do anything else.

Related guides

See our guide to phishing and online shopping scams and our guide to Safari pop-ups and fake virus warnings.

Need a hand?

We can check your Mac, set up protection that suits your business and talk through what your insurer expects. See our Security & Email Protection service for businesses, our Online Safety & Protection service for home users, or contact Your Mac Tech.