This repository is a collection of scripts designed to secure/harden macOS.
Table of Contents
Below is a list of tools included in this repository.
Tool Name | Description | Category | Requirements | Notes |
---|---|---|---|---|
Root Locker | Locks the root account to prevent direct logins. | Hardening | Root privileges | Preserves sudo access |
Note
All scripts include version information in their headers. Check individual CHANGELOG.md files in each tool's directory for version history and updates.
The following requirements extend to every tool in this repository:
- Bash: Version 3.2 or higher
- Operating System: macOS
All you need to do is download this repository to your local machine:
git clone https://github.com/StrangeRanger/macos-security-scripts
cd macos-security-scripts
You can run any script individually using one of the following methods:
./[script-name]
# OR
bash [script-name]
Below is a list of all the versions of macOS that the security scripts have been officially tested and are confirmed to work on.
- macOS 15 (Sequoia)
- macOS 14 (Sonoma)
- macOS 13 (Ventura)
- macOS 12 (Monterey)
- macOS 11 (Big Sur)
While this repository has scripts that can help secure macOS, it doesn't cover everything. Below are some other resources that can help you further secure your Mac:
- macOS Security and Privacy Guide - A resource with a lot of good advice on how to increase the privacy and security of your Mac.
- Privacy.Sexy - Open-source tool to enforce privacy & security best-practices on Windows and macOS, because privacy is sexy 🍑🍆.
Please use GitHub Issues for bug reports and feature requests.
Licensing may vary by tool; see individual file headers.