Even though Macs are indeed safer than Windows, the question remains — are there any specific measures I should take for security?
The answer is that even though many users will never have issues with security on their Macs, it doesn’t hurt to be prepared for it. Now, I am dividing the following guide in three parts: basic security tips, advanced security tips, and security tips for the paranoid! This was written with the present state of Mac security in mind — one where there’s no real threats out there, for the moment. So let’s get started.
::
Basic security tips.
Back up your data. This is one task everyone should do, no matter what. It not only protects your data from security threats, but also for any kind of conceivable threat that may come to mind for your computer.
You can either do backups manually, or have some apps do them for you. The recommended ones for this task are the free Silverkeeper and Backity Mac, or the always SuperDuper!.
The time interval between backups can depend from what kind of user you are — but the recommended average is one backup every two to four weeks.
Enable Software Update. You can set it to check for updates automatically once every week. Here, the most important updates are those labeled as “Security Update”. Even though Apple hasn’t released much of these lately, it’s always good to keep an eye out for them.
::
Advanced security tips.
Don’t blame the admin. The great majority of Mac user accounts are admins. But this isn’t always good, since you’re left more open to security risks. Your computer should have two accounts: one for regular use, and other for admin purposes. This is fixed very easily.
Just go to the Accounts system preferences and create a new account, name it something like “Admin” or whatever you like, and grant it admin privileges. Now sign out of your regular account and into the one you’ve just created. There, strip your account of the admin privileges and log back into it. From now on, each time some trusted process requires admin privileges, you can just use that account for it.
Have an anti-virus on stand-by. With the woes of such Mac antivirus like Symantec’s, here is where I recommend having clamXav just for scanning your home folder once in a while, or suspicious-looking files.
Enable the firewall. This process requires more of a trial and error style of approach, since you have to figure out which ports you need for the network to work flawlessly. But no worries, since it comes with some important ports preprogrammed into it. You can access the firewall through the Sharing system preferences.
::
Security tips for the paranoid!
Enable File Vault. This only applies if you’re really worried about your Mac’s data. What it does is encrypt your entire home directory and set a master password. But unless you have a speedy Mac, you may notice brief moments as it encrypts the data on the go. Otherwise, it shouldn’t affect performance much. You can turn it on at the Security system preferences.
Enable Stealth Mode. Woah! Can a Mac really do that? Sort of… I mean, it won’t go all Bird of Prey on you — but it will make itself invisible when receiving unathorized queries by not responding at all, as if the computer really wasn’t there. Just go to the Sharing system preferences, on the firewall window select Advanced, and check the Stealth Mode box to activate it.
Use safe virtual memory. Look for it at the Security system preferences.