{"id":68935,"date":"2024-12-21T00:02:24","date_gmt":"2024-12-21T08:02:24","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=68935"},"modified":"2025-01-21T06:14:39","modified_gmt":"2025-01-21T14:14:39","slug":"understanding-user-accounts-in-macos","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/understanding-user-accounts-in-macos\/","title":{"rendered":"Understanding User Accounts in macOS"},"content":{"rendered":"

\"Understanding<\/p>\n

To use a Mac, you must have a user account. If you’re the only person using your Mac, then there will only be one account. But your Mac can contain multiple accounts, if you share your it with other users, such as your family or coworkers, for example.<\/p>\n

At least one of these accounts is an administrator account, and that account is allowed to change any settings on the Mac. Others can be standard accounts, and their users can change settings that affect some of what they do on the computer. You can also have accounts that are managed with parental controls; these are designed so your kids can use your computer safely. Finally, there are sharing-only accounts, which you can create so users can access some files on your Mac over a network.<\/p>\n

In this article, I’m going to explain how to create user accounts, when and how to use each of these different types of accounts, how to delete them when you don’t need them any longer, and how to use Screen Time to set up parental controls for your kids.<\/p>\n

The First Account: The Administrator<\/h3>\n

When you set up a new Mac, you have to create a user account, and that first user account is an administrator account. The administrator is the person who can change any settings on the computer. If there were no administrator, then no one could set up other user accounts as well as make other important changes to the way the Mac works. The administrator can change settings such as which startup disk the computer uses, which files can be shared, backup and security settings, and more.<\/p>\n

In addition to creating new user accounts, the administrator can modify existing user accounts. He or she can allow any user to also be an administrator \u2014 you can have as many administrator accounts as you want \u2014 and can also reset the password of any user account. And the administrator can enable and set up parental controls<\/a> on any account.<\/p>\n

To see your existing user accounts, go to System Settings > Users & Groups. This preference pane shows a list of existing user accounts, lets you create new accounts, and it also lets you set a number of login options.<\/p>\n

\"\"<\/p>\n

Start by looking at your own user account; it’s at the top of the list. Click the i next to it and you see a number of options. You can change your password if you wish, and at the bottom of the pane, you can check Allow user to reset password using Apple Account. If you enable this option, and the user has logged in with their Apple Account, they can reset their account password, if they’ve forgotten it, by entering their Apple Account credentials.<\/p>\n

\"\"<\/p>\n

Prior to macOS Ventura, there was a Login Items tab on this pane, which made sense because this dealt with apps that open for individual users. This is now located in System Settings > General > Login Items & Extensions. It shows a list of apps that launch when you log into or start up the Mac. You can add apps to this list by dragging their icons to it, or by clicking the + icon and navigating to an app. Remove any apps by selecting them in the list and clicking the – icon.<\/p>\n

\"\"<\/p>\n

Standard User Accounts<\/h3>\n

Standard users are limited only in their ability to change certain settings and access system files. Otherwise, each standard user has full access to the files in their home folder \u2014 the one with the house icon and their username \u2014 and can change any settings in System Preferences that apply to their personal use of the Mac.<\/p>\n

To create a new standard user account, click Add User; you’ll be asked to enter your administrator’s password, then a dialog displays with Standard selected as the type of account. Enter the user’s full name, then an account name \u2014 it’s best that this is an abbreviated name, and it can’t contain spaces \u2014 then enter a password and enter it again in the Verify field. If you wish to have a password hint to remind the user of their password in case they forget it, you can enter that as well. Click Create User, and the Mac will create a new account and a new home folder for that user. They will be able to log in and access their files, and will be able to use any applications installed in the Applications folder on the Mac.<\/p>\n

\"\"<\/p>\n

Administrator Accounts<\/h3>\n

You can also create new administrator accounts. In the same dialog above, click the New User menu and choose Administrator. The rest of the creation process is the same as for standard accounts.<\/p>\n

Sharing Only Account<\/h3>\n

A sharing only user account allows a user to access specific shared folders on your Mac. If you use your Mac for file sharing at home or at work, you may want to create accounts for users so they can access files on the computer in specific folders or specific disks but do nothing else. To do this, select Sharing Only from the New User menu. Fill in the rest of the information as above, but to provide access to selected folders, you must then go to the Sharing preference pane in System Preferences. See this Apple support document<\/a> for more information on file sharing.<\/p>\n

Guest Account<\/h3>\n

Finally, you will notice a Guest User listed in the settings pane. Click the i icon next to this user and check Allow guests to log in to this computer. When the guest account feature is active, any guest to your home or your office can sit down at this Mac and click on Guest on the login screen to be able to use the computer. You really don’t want your friends to check their email on the web while in your user account, where they could potentially access a lot of your personal information or files, so they could use a web browser and log into their accounts.<\/p>\n

\"\"<\/p>\n

None of their files will be saved; when they log out everything will be deleted. But they can browse the web, configure Mail to use their email account temporarily, send instant messages, and more. And unless you check the option to allow them to connect to shared folders, they will have no access to any of the files on the computer outside of their temporary home folder.<\/p>\n

The Guest Account settings also have an option to limit access to adult websites.<\/p>\n

Create Groups<\/strong><\/p>\n

If you have a lot of users accessing your Mac in a business or school, it can be useful to create one or more groups. Click Add Group to create a new group, name the group, then click the i icon to the right of the group name. You can add any user accounts on your Mac to the group. Group settings only apply to file sharing and screen sharing, not to any Screen Time options. When you go to the Sharing settings, you can then choose a group name rather than a number of user names, which changing these settings.<\/p>\n

Deleting Accounts<\/h3>\n

While you may create accounts for users who will be accessing your Mac for a long time, you may also temporarily create an account for, say, a friend who is staying with you for a week or a temporary employee. When they no longer need access to this Mac, click the i icon next to their account in the user list, then click Delete User to delete it. You’ll be given an option to save all their files in a disk image, leave their home folder in the Users folder, or delete the home folder.<\/p>\n

Account with Parental Controls<\/h3>\n

To create a new account with parental controls, start by making a new standard user account. When you’ve done that, go to the Screen Time settings, which is where you apply parental controls.<\/p>\n

There are two ways to enable and apply parental controls with Screen Time:<\/p>\n

If you’re using Family Sharing, click the Family Sharing menu at the top left corner of the Screen Time preference pane and choose the name of one of your children. You can manage their screen time settings from any Mac, iPhone, or iPad.<\/p>\n

If you’re not using Family Sharing, you’ll need to log in with your child’s user name and password.<\/p>\n

In both cases, you have access to a number of settings in the Screen Time sidebar. Click App & Website Activity, and your Mac asks you if you want to enable this feature. This also changes the display of the Screen Time settings, to include a number of options.<\/p>\n

Downtime<\/strong> is where you set time periods, by day of the week, when your child is not allowed to use the computer.<\/p>\n

\"\"<\/p>\n

In App Limits<\/strong>, you can choose apps you want to limit access to. For example, if you don’t want your child to be able to use the TV app for more than one hour a day, you can set a limit here. They get a notification five minutes before their time is up.<\/p>\n

\"\"<\/p>\n

Use Communication Limits<\/strong> to limit who children can contact via FaceTime and Messages (and if your child has an iPhone, and is signed in with the same Apple ID, the settings you apply here also affect the Phone app on that device). And enable Communication Safety<\/strong> to tell the Mac to detect nude photos and videos before a child sees them.<\/p>\n

Always Allowed<\/strong> lets you set contacts that your children can always communicate with, such as parents or other family members. You can also whitelist apps so they can use specific apps without limits.<\/p>\n

\"\"<\/p>\n

The Content & Privacy<\/strong> section gives you a large number of settings regarding which type of web content they can view, what they can do with Game Center games, which stores they can access, and which age ratings content for them is allowed, and many other options. Check this section carefully, and remember that these settings also apply to an iOS device that your children use.<\/p>\n

Screen<\/strong> Distance<\/strong> is available on iPhones and iPads with Face ID running iOS 17 \/ iPadOS 17 or later that alerts users if they’re holding the screen to close to their yes. This setting doesn’t affect Macs.<\/p>\n

If you enable Share across devices,<\/strong> these settings will apply to all devices used by the same person. You can also set a Screen Time passcode, which allows you to override limitations easily. So if your child has to finish their homework, and needs to use Safari, but is out of time, you can enter the passcode to give them more time.<\/p>\n

Bottom Line<\/h3>\n

While most Mac users only have a single account on their computers, it can be useful to create additional accounts for friends, family, or coworkers. This is easy to do, and all of your files are secure even when another user works on your Mac.<\/p>\n

How can I learn more?<\/h3>\n

\"\"<\/a>Each week on the Intego Mac Podcast<\/strong><\/a>, Intego’s Mac security experts discuss the latest Apple news, including security and privacy stories, and offer practical advice on getting the most out of your Apple devices. Be sure to follow the podcast<\/strong><\/a> to make sure you don\u2019t miss any episodes.<\/p>\n

You can also subscribe to our e-mail newsletter<\/strong><\/a> and keep an eye here on The Mac Security Blog<\/strong><\/a> for the latest Apple security and privacy news. And don’t forget to follow Intego on your favorite social media channels: \"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a>\u00a0\"Follow<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

You can’t use a Mac without a user account. Learn how to create and manage user accounts on your Mac, and how to set time limits for your kids with Screen Time.<\/p>\n","protected":false},"author":46,"featured_media":71023,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[10],"tags":[3175,413,3685],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n