Do yous suspect that someone else is accessing your MacBook without your permission? This can feel like an invasion of privacy, particularly if they're doing it for all the wrong reasons. Don't worry—yous're not alone. Many people have these concerns later leaving their MacBook at work or at domicile.

You lot could physically dust your Mac for fingerprints, of grade, merely if you lot lack the gear for that, there are digital tools y'all tin use for this detective work instead. You'll be amazed at what yous tin observe out simply past checking logs and looking at recently opened documents and applications.

How to Check Who's Accessed Your Mac Recently

Nosotros always advise keeping your Mac secure using a countersign, which yous change from time to time. Simply even if you do that, there's even so a run a risk that someone could figure out your countersign and go admission to your computer.

In this case, you tin check the Mac login activity and recent logs to search for suspicious activity. This assumes that you left your Mac in slumber way (and logged out). We'll show you how to do that using Concluding below.

Cheque the Login History in Concluding

The quickest fashion to check your MacBook'due south login history is by using the final control in Concluding. This lists all the login events on your Mac in descending lodge.

To practise this, open up Final on your Mac. Type in last and printing Enter.

This will list all the login events with your account username and the verbal login time. You can use this to guess whether someone else may have logged in to your Mac behind your back. It will likewise include the history of your Mac being restarted or close downward, which might be helpful.

Last Command in Terminal

Check the Logs in Terminal

You lot can also access your system logs using Final. Since macOS records everything your Mac does, it's a very long list of logs. However, you lot can narrow it downward using the following control in Terminal. Just blazon in the following and printing Enter:

          log show --fashion syslog | fgrep "[powerd:sleepWake]"        

You'll see a long list of logs. Since most of these are system events, you might observe information technology difficult to filter through them, but you lot tin can focus on the timestamp on the specific logs. This should help you figure out the times your Mac was opened or logged in to.

Power Logs in Terminal

Knowing when your estimator wakes upward might not be enough—cats pressing keyboard keys can be enough to prompt this. Just if you're using a MacBook you'll know exactly when someone opened information technology to use your figurer, and that's very helpful.

This won't tell y'all who is using your computer, of course, or what they did. Only it's a adept place to start.

Check the Contempo Items

Your Mac keeps track of recently opened applications and documents. It does this mainly to help you lot quickly admission them again, merely information technology'south also really useful if yous suspect someone else is using your calculator. After all, they'll possibly be interested in unlike applications and documents than you lot are.

Encounter a list of all recent applications and documents by clicking the Apple logo in the peak-left corner, then hovering over Recent Items. You'll see a list showing the applications and documents that accept recently been used.

Recent Items from the Apple menu

Agree Cmd

on the keyboard and click to see these files in Finder, giving you lot access to information like when they were terminal opened.

Some other method to access the recent items is to open Finder on your Mac. Click on Get > Recent Folders from the carte bar, and you should see a list of all recently opened files. This includes recently opened documents, pictures, movies, and more than. Even so, information technology is possible for people to clear this menu using the Articulate Menu push button, which is why it may not be that reliable.

Recent Folders from the Finder menu

If you find something here y'all know you didn't expect at recently, and so y'all've got one more piece of show that someone else is using your Mac while you're not around.

In that location are other "recent" things to cheque, of course, beyond what your Mac records on its own. Your web browser, for case, includes a detailed web history. Y'all can find this from the Browser History in your browser bill of fare bar, regardless of which one you use. Nonetheless, you lot should note that information technology is quite easy to circumvent history tracking by using a browser'southward in-congenital private browsing method.

Applications similar Microsoft Discussion and InDesign also have their own list of recently opened documents. Cheque these and other applications if y'all want to gather further evidence.

Install Snooping Software

If this isn't telling you enough, and yous suspect the unauthorized usage is ongoing, you could install some snooping software to notice out what'southward going on.

Casualty, which offers a free trial or subscription, lets you monitor calculator usage from any other device connected to the spider web. You can have screenshots to come across exactly what's going on with your Mac while you're away from information technology. Heck, you could fifty-fifty utilise it to take a picture of your moocher using the built-in webcam.

Kill It With Passwords

But there's an even simpler solution: lock your Mac with a countersign. If you lot don't desire people using your computer behind your back, this is the most effective means of doing so. If yous already have a password, modify it and don't tell anyone the new one.

If you'd rather not exercise that, however, yous should get a pretty good idea of who's using your Mac with the steps above—between the logs and the recent apps, a decent detective should be able to rule out about major suspects. The rest, of course, is upwardly to you.

How to Tell If Someone Was Snooping on Your PC: four Ways

Read Next

About The Author