And you can apply that decision once, or until you restart your Mac, quit the app or log out.

You can then choose whether to allow the connection or to block it. Install Little Snitch, and whenever an app tries to connect to the internet, you’ll get a notification. If you want something more user friendly, you’ll need a third-party firewall. The macOS firewall isn’t built to do this, but it is possible with PF (Packet Filter), macOS’s more advanced firewall that can only be controlled via the Terminal command line. That includes malware, which may try to send your data to hackers. In that scenario, you might be at risk of poor security or even a fake network.Īnother good reason to use a firewall is to control which Mac apps can connect to the internet. One such case is when you’re connected to a public network - for example, if you hook your MacBook up to wi-fi in a hotel. The combination of these factors is why Apple doesn’t make a big deal about the macOS firewall.īut there are times when a firewall app can be a handy thing to have on your Mac. On top of that, your router will also have its own firewall, so in most cases you don’t need any extra protection. That’s partly due to the fact macOS doesn’t run services that listen for network connections.

Specifically the fact that Mac users generally don’t need any extra firewall software to be enabled. But macOS comes with a firewall built in - and by default, it’s turned off.

Best balance of cost and features: Vallumīefore buying a firewall for your Mac, you first have to decide whether you actually need one.

Little snitch firewall