ASK
Email Mac|Life at ask@maclife.com
Get official documentation at support.apple.com
Get help with hardware at support.apple.com/repair
Improve your malware protection
Should I strengthen my current anti–malware protection with Little Snitch, Hazel, or what?
Security systems built into macOS and third–party anti–malware products are primary protection, as they try to detect and stop malicious software from being run in the first place. Software firewalls like Little Snitch and tools like Hazel are secondary protection, as they only come into play when the malware is already running.
A software firewall can block attempts by any software to make outgoing network connections from your Mac. As that’s common behavior in malware and unwanted software, it may be a valuable defence and alert you. But many apps legitimately call home too, so if you’re not careful you can create more problems. Software firewalls aren’t set and forget, and are best for advanced users who understand how to use them properly.
Hazel isn’t intended for security use — it automates actions on folders. But one of its valuable features is that it can watch folders and notify you when anything changes inside them. Malware and its relatives often install scripts in LaunchAgents or LaunchDaemons folders in Library folders, something that Hazel can readily warn you about. It’s simple to set up and doesn’t stop other software from functioning normally.
Those apps therefore won’t stop malware, but as secondary protection can be valuable when used wisely.
