When we talk about browsing with Safari on a Mac, the difference between going "bare" or with everything properly configured is enormous: with a few adjustments you can protect your privacy, increase security and keep the system running smoothly. I propose a clear and complete tour through all the key settings Safari and macOS settings that affect your browsing, so you have real control over your data and performance.
In addition to Safari's own switches, macOS offers a range of options in "Privacy & Security" that are worth reviewing without hesitation. The idea is simple: limit permissions to the bare minimum, enable encryption, and block personalized advertising. If it doesn't add value for you. Let's go step by step with a practical guide, in Spanish from Spain and with some colloquial touches, so you can get your Mac running perfectly.
Essential Safari settings to protect you while browsing
Start by opening Safari and going to its settings. In recent versions, you'll find the path under Safari > Settings; in others, you'll see Safari > Preferences. On the Privacy tab, turn on "Prevent cross-site tracking." This switch drastically reduces ad tracking between domains, limiting the profiles that third parties create about you.
In that same panel, consider "Block all cookies" if you're visiting reading pages or don't need to log in. Note: this can break logins or shopping carts, so use it wisely. If you just want to clean, go into Manage website dataReview the list and delete cookies and local storage from services you don't need.
Go to Security and check that the warning about fraudulent or phishing sites is enabled. Safari will warn you when a link looks suspicious. or try to sneak malware in. It's a layer of defense you shouldn't disable.
In the "Search" panel, you can reduce what is sent to third parties: disable "Include search engine suggestions," "Include Safari suggestions," and "Preload top result in background," and if you prefer another search engine, consult How to change the default search engine. Less data shared, less footprint while typing in the address bar.
Activate “Hide IP address” from known trackers (in Privacy), and evaluate use iCloud Private Relay if you want to reinforce that concealment. Prevent your IP address from being used as an identifier It complicates profiling and approximate geolocation by websites and advertisers.
Private browsing is your ally for sensitive sessions: File > New private window or shortcut Shift + Command + N. This mode does not save history, cookies, or searches Locally, ideal for one-off queries where you don't want to leave a trace on your Mac.
macOS privacy and permissions that affect Safari
Open the Apple menu > System Settings > Privacy & Security. Here you'll see categories of permissions that directly affect how apps and websites access your data. The golden rule: only grant what is absolutely necessary. and check the list periodically.
- LocationThis allows apps, system services, and websites to use your location. Tap "Details" to view system services and turn "Location-Based Suggestions" on or off (this affects Siri and Safari Suggestions). You can also control Safari's location access from Safari > Settings > Websites > Location.
- Calendars, Contacts, RemindersCheck the apps that requested access to your personal data. If they don't use it to give you value, uncheck them.
- PhotosDecide whether an app sees all your photos or only a selection. In "Options" you can restrict metadata such as location. Sharing without geodata is more prudent.
- Files and foldersThis controls which programs can read/write to specific locations. “Full disk access” is even more sensitive: it includes data from Mail, Messages, Safari, Time Machine backups, and settings for the entire Mac. Grant this access only to software you completely trust..
- Accessibility and Entry Monitoring: allow apps to control the Mac or read keyboard/mouse input. Watch him like a hawk and remove what you don't need.
- Automation: apps that control other apps (open documents, perform actions). Review and limit if you don't use those integrations.
- Bluetooth and Local Network: decide which apps discover and communicate with nearby devices or on your network. Deactivate where it is not useful.
- Camera and Microphone: Only authorize video calling or recording apps that you actually use. If in doubt, disable and grant permission only as needed..
- Multimedia and Apple MusicControl who accesses your library and playback activity. It is sensitive information about habits.
- HomeKitApps with access to your digital home. Minimum permit to maintain home security.
- Physical activity: data from the Fitness app. Only for reliable health or fitness apps.
- Remote Desktop: access to screen and audio via remote desktop. Disabled by default, only activate it when needed..
- Screen and system audio recordingWho can record what you see and hear on your Mac? Check the list carefully.; add or remove apps with the +/− button.
- Speech recognition: control over who uses Mac's speech recognition. Limit it if you don't need it.
- Sensitive content notice: blurs photos and videos with potentially sensitive content, with the option to view them on demand. Useful for avoiding surprises.
- Blocked contacts: manages blocks in FaceTime, Messages and calls. Remember to keep it up to date.
- Web browsers' access to access keys: allows third-party browsers to use your saved passkeys. It makes logging in easy without passwords. and with greater security.
In several of these categories you will see a + button to manually add apps (for example, Accessibility, Camera or Bluetooth). Only include tools that you recognize and need.If you're unsure, it's best not to add it.
Advanced security: FileVault, Firewall, and Isolation Mode
Activate FileVault to encrypt your startup disk. This way, without your password, no one will be able to read your data if they steal your computer. When you activate it for the first time, choose how you will regain access If you forget your password: with your Apple account or using a recovery key that you should keep safe.
The firewall blocks unwanted incoming connections. You can enable it and allow or restrict services in System Settings > Network > Firewall. Enable "stealth mode" to prevent your Mac from responding to probes. on the network; you'll gain discretion on public and private Wi-Fi.
In Privacy and Security you will find “Allow apps from”: decide if you want to install only from the App Store or also from developers identified by Apple. Staying in the App Store is the most conservative optionAdding identified developers opens up options with controlled risk.
If you're using a laptop with an Apple chip, you'll see "Allow accessories to connect" for USB, Thunderbolt, or SD cards. There are four levels: Always ask, Ask with new accessories, Automatically when unlocked, and Always. The safest thing to do is "Ask"at least for new accessories.
Isolation Mode is for extreme scenarios (targets of highly sophisticated attacks). It limits apps, websites, and functions to reduce the attack surface. It is not intended for daily use.But it's good to know about it in case you ever need it.
With the latest macOS you can also generate a “Report of Apple Intelligence"with the requests that Apple's intelligence sent to private cloud computing in the last 15 minutes or 7 days." Transparency to know what has come out of your team in scenarios with system AI.
Data control, advertising, and analytics
In Privacy & Security > “Analysis & Improvements,” you can choose whether to send diagnostics to Apple and developers. You’ll see options such as “Share Mac Analysis,” “Improve Siri & Dictation,” “Improve Assistive Voice,” “Share with Developers,” and “Share iCloud Analysis.” You can disable them all without breaking anythingIt's your choice.
In “Apple Advertising,” you can turn off “Personalized Ads” so Apple doesn’t use your data for advertising purposes. You’ll still see ads, but they’ll be less targeted. You can also review Apple's "About Advertising and Privacy" policy. from that screen.
Private browsing, useful extensions, and regular cleaning
Private browsing is two clicks away (File > New private window) or a shortcut (Shift + Command + N). It's perfect for one-off searches or sessions on shared computers. where you don't want a record to be kept. You can find more information in the guide on private browsing in Safari.
As for extensions, some that block trackers and enforce HTTPS are worth considering. For example, AdGuard for Safari or DuckDuckGo Privacy Essentials are known for protecting you with minimal impact on speed. Install them from the App Storeand follow our guide to install ad blockers to take advantage of them safely.
Do some cleaning from time to time: History > Clear History (choose the time range) and, for more fine-tuning, Safari > Settings/Preferences > Privacy > “Manage Website Data”. Clearing cache, cookies, and local storage speeds up Safari and reduces your footprint.
If you share your Mac, consider disabling form and password autofill in Safari. In multi-user environments, less autocomplete means more security.
Passwords, access keys, and unlocking your Mac
macOS already includes a password and passkey manager. You can allow third-party browsers to use these passkeys (Privacy & Security > “Web Browser Access to Passkeys”). Passkeys replace traditional passwords with cryptography, preventing phishing and reuse.
Your first line of defense is your login password: make it strong but reasonable for everyday use. Avoid 1234, obvious dates, or easy namesIt opts for a long phrase with a mix of letters and numbers. In Settings > Lock screen, it asks for the password shortly after the screen turns off or locks.
If you wear an Apple Watch, you can use it to unlock your Mac and authorize actions. It's very convenient and reduces the temptation to use a weak password. out of sheer laziness.
For your online accounts, enable two-factor or multi-factor authentication whenever possible. A second factor (code, physical key, or biometrics) makes all the difference in the face of password leaks.
And if you manage many accounts, use a password manager with good practices: unique, long passwords (more than 15 characters) and generated on the fly. Delegating the memory task to a manager allows you to be more strict. with safety without losing agility.
Fine-tuning location in Safari
Some websites will ask for location access (for example, courier or food delivery services). When the notification appears, you can select "Remember my decision for one day" and allow access for only 24 hours. This prevents the permit from becoming permanent. and you reduce the chances of long-term follow-up.
If you prefer to turn off the tap completely, go to Safari > Settings/Preferences > Websites > Location and, under “When visiting other websites”, choose “Don’t allow”. The trade-off is entering addresses manually when a site needs them.
Usage time and content control
With Screen Time, you can monitor and limit access to websites for minors (or for yourself if you prefer self-control). In System Settings > Screen Time, you can set content restrictions and time limits. It's a simple way to put healthy barriers to navigation without complicating your life with external apps.
Updates, backups, and sharing
Update macOS and Safari as soon as patches are available. The updates fix vulnerabilities and improve performanceActivate automatic search and installation to forget about it and always stay up to date; see our guide for more information. update Safari If you need steps and solutions.
Set up backups with Time Machine on an external drive. A nightly backup saves you from losses, errors, and even ransomware.It's one of those habits you only miss when you don't have it anymore.
In Settings > General > Sharing, review what you expose on your network: screen, files, printers, etc. Activate only what you need and turn it off on public networksThe less visible your services are, the fewer options for curious onlookers.
Regarding deletion: SSD drives no longer have the "secure emptying of the recycle bin" of yesteryear. FileVault encryption is the practical defense So that even if someone gains access to the drive, they won't be able to read anything. If you need certified file destruction, consider specialized third-party tools.
Do Macs need antivirus software?
macOS has a head start in security, but it's not invulnerable. There have been cases of ransomware on Macs, and phishing is rampant. A reliable antivirus adds a layer against malware, malicious websites, and compromised Wi-Fi networks.If you also add a reliable VPN to encrypt your connection on public Wi-Fi networks, you'll be on the safe side.
Finding your Mac and other practical steps
Turn on "Find My Mac" to be able to remotely locate, lock, or erase your Mac if it's lost. Make sure Location Services is enabled and, in iCloud, select "Find My Mac." Enabling the guest user can help the team connect and send its location in case of theft.
Don't forget to enable "Allow accessories to connect" in strict mode if you travel a lot, and keep the Firewall active in stealth mode. Small details that complicate life for the opportunistic attackerespecially in open networks.
With all of the above, you'll have Safari and your Mac fine-tuned: reduced tracking, controlled permissions, encrypted disk, active firewall, less intrusive ads, regular cleaning, and extra measures like passkeys, 2FA, and Find My Mac. These are simple changes that, when combined, enhance your privacy, security, and daily performance without sacrificing comfort.
