This document outlines how I configure macOS manually on a clean install of macOS Sequoia (15.4) on an Apple Silicon Mac. The focus is on privacy, usability, and performance, with added guidance for security-conscious users and developers. Scripts are intentionally avoided to ensure users understand and control each change.
Feel free to fork, tweak, or contribute.
-
Open Finder:
- View → Show Path Bar
- Finder → Settings:
- General: "New Finder windows show" →
<home folder> - Sidebar: Enable quick access folders (e.g. Movies, Music, Pictures)
- Advanced:
- Show all filename extensions →
ON - Keep folders on top:
- In windows when sorting by name →
ON - On Desktop →
ON
- In windows when sorting by name →
- When performing a search → Search the Current Folder
- Show all filename extensions →
- General: "New Finder windows show" →
-
With the home folder open:
- View → Show View Options:
- Always open in icon view →
ON - Browse in icon view →
ON - Grid spacing → Max
- Show item info →
ON - Show Library Folder →
ON - Use as Defaults
- Always open in icon view →
- View → Show View Options:
- System Settings → Apple ID → iCloud → iCloud Drive → Desktop & Documents Folders →
ON
- Open Messages
- Settings → iMessage tab:
- Enable Messages in iCloud →
ON - Send Read Receipts →
ON - Start new conversations from →
<Apple ID>
- Enable Messages in iCloud →
Settings → Messages:
- Show Contact Photos →
OFF - Text Message Forwarding → Your Mac →
ON - Send Read Receipts →
ON - Keep Messages →
Forever - Audio Messages → Expire →
Never - Low Quality Image Mode →
OFF - Share Name and Photo:
- Name & Photo Sharing →
ON - Share Automatically →
Contacts Only
- Name & Photo Sharing →
Listed in the order they appear in System Settings on macOS Sequoia.
- System Settings → Notifications → Allow notifications when display is sleeping →
OFF
- System Settings → Accessibility → Pointer Control → Trackpad Options:
- Use trackpad for dragging →
ON - Dragging Style → Three Finger Drag
- Use trackpad for dragging →
- System Settings → Privacy & Security:
- FileVault →
ON(enabled by default on Apple Silicon) - Advanced → Require administrator password to access system-wide settings →
ON - Analytics & Improvements:
- Share Mac Analytics →
OFF - Improve Siri & Dictation →
OFF
- Share Mac Analytics →
- FileVault →
- System Settings → Apple ID → iCloud → Advanced Data Protection →
ON
- System Settings → Desktop & Dock:
- Minimize windows into application icon →
ON - Show suggested and recent apps in Dock →
OFF
- Minimize windows into application icon →
Optional Terminal Customizations:
# Adjust Dock icon size
defaults write com.apple.dock tilesize -int 36
# Lock the Dock size
defaults write com.apple.dock size-immutable -bool true
# Apply changes
killall Dock- System Settings → Lock Screen:
- Start Screen Saver when inactive →
Never - Turn display off on battery →
2 minutes - Turn display off on power adapter →
10 minutes - Require password after screen saver or display is off →
Immediately
- Start Screen Saver when inactive →
- System Settings → Keyboard → Input Sources → Edit:
- Correct spelling automatically →
OFF - Capitalize words automatically →
OFF
- Correct spelling automatically →
- System Settings → Trackpad:
- Tap to click →
ON
- Tap to click →
Apple Silicon Macs do not support firmware passwords. The settings below are available through macOS Recovery.
- Restart Mac → Hold
⌘ + Rimmediately - Authenticate to enter Recovery
- Utilities → Startup Security Utility
- Set the following:
- Secure Boot → Full Security
- Allowed Boot Media → Disallow booting from external or removable media
-
Enable Find My Mac
- System Settings → Apple ID → iCloud → Find My Mac →
ON
- System Settings → Apple ID → iCloud → Find My Mac →
-
Disable Guest User
- System Settings → Users → Guest User → Allow guests to log in →
OFF
- System Settings → Users → Guest User → Allow guests to log in →
-
Review Login Items
- System Settings → General → Login Items
- Remove unused apps under "Open at Login"
-
Disable Wake for Network Access (optional)
- System Settings → Battery → Options → Wake for network access →
Never
- System Settings → Battery → Options → Wake for network access →