Do Macs need antivirus? What macOS already does — and when to add more

"Macs don't get viruses" was never quite true, and it isn't now. But it is true that macOS has strong defences built in, and that most Mac owners are well protected without installing anything. The useful question is what those defences cover, and where they leave gaps.

What macOS already does

Apple describes several layers that work without any setup:

• Gatekeeper and notarization — apps from outside the App Store are scanned by Apple for known malware before they're notarized, and Gatekeeper checks that ticket before an app is allowed to launch. Apple can also revoke tickets for apps later found to be malicious.
• XProtect — Apple's built-in, signature-based antivirus technology. It checks apps when they first launch, when they change and when its signatures update, and moves known malware to the Trash.
• Automatic updates — Apple pushes XProtect updates automatically, and by default macOS checks for them daily.

Where built-in protection stops

• Signature-based detection is strongest against known malware; brand-new threats rely more on the other layers.
• Gatekeeper warnings can be overridden. Fake installers and "cracked" apps work by persuading people to do exactly that.
• Phishing pages and scam sites target the person, not the Mac — no malware scanner sees a password you type into a fake login page.
• There's no single dashboard covering the household's Windows PCs and phones alongside the Mac.
• Extras such as a VPN, password manager or identity monitoring aren't part of macOS protection itself.

When macOS alone is likely enough

• You keep macOS updated and install apps from the App Store or developers' official sites.
• You never override a Gatekeeper warning for an app you don't recognize.
• You don't need extras, or you already use separate tools you're happy with.

When a suite makes sense on a Mac

• The Mac is one of several devices in a household you want to manage in one place.
• Someone using the Mac is likely to click through warnings or install software from unofficial sources.
• You want web and phishing protection plus extras — VPN, password manager — in one subscription.

Best antivirus for Mac: what to look for

• Protection that works alongside macOS's own layers rather than fighting them.
• Web and phishing protection in the browsers you actually use.
• Low performance impact — check recent independent lab results for macOS.
• Coverage for the household's other devices under the same account, if that's why you're buying.
• A clear renewal price, not just a first-year offer.

If you do add one

• All five suites we cover — Norton, TotalAV, McAfee, Avast and Avira — document macOS apps.
• Mac versions often have fewer features than Windows versions. Check that the specific features you want exist on macOS for the plan you're buying.
• Download it only from the vendor's official site, and check the renewal price before paying.

On a Mac, the biggest risk is usually being talked into installing something. Built-in protection handles the rest well; a suite earns its place by covering everything else in the house.