USB-C Accessories Need User Permission to Communicate With Apple Silicon Macs Running macOS Ventura

With macOS Ventura, there's a new USB-C security feature designed for Apple silicon Macs. As described by Apple in the macOS Ventura release notes (via The Verge), USB-C and Thunderbolt accessories connected to the USB-C port on an Apple silicon Mac will require explicit user permission before the accessory can communicate with macOS.

macbook air purple

On portable Mac computers with Apple silicon, new USB and Thunderbolt accessories require user approval before the accessory can communicate with macOS for connections wired directly to the USB-C port. This doesn't apply to power adapters, standalone displays, or connections to an approved hub. Devices can still charge if you choose Don't Allow.

You can change the security configuration in System Settings > Security and Privacy > Security. The initial configuration is Ask for new accessories. Configuring an accessibility Switch Control sets the policy to always allow accessory use. Approved devices can connect to a locked Mac for up to three days.

Accessories attached during software update from prior versions of macOS are allowed automatically. New accessories attached prior to rebooting the Mac might enumerate and function, but won't be remembered until connected to an unlocked Mac and explicitly approved.

The user permission restriction does not apply to power adapters, standalone displays, or connections to an approved hub, so it will not impact the use of displays or chargers, and it can be toggled off if desired.

‌macOS Ventura‌ is available to developers at the current time, with a public beta planned for July.

Related Roundup: macOS Ventura
Related Forum: macOS Ventura

Top Rated Comments

rorschach Avatar
13 months ago
Good idea. But what happens if your keyboard and mouse suddenly stop working (it happens) and you need to plug in USB ones? How will you "approve" them?
Score: 22 Votes (Like | Disagree)
zakarhino Avatar
13 months ago
Underrated simple idea that might help mitigate chargers with malware.
Score: 12 Votes (Like | Disagree)
dave420 Avatar
13 months ago
Yes good idea. The type of thing that makes you wonder why it wasn't always there.
Score: 9 Votes (Like | Disagree)
dmylrea Avatar
13 months ago

Yes

Exploiting any vulnerability in the USB software stack on the system.
But, how does the user know they are being exploited when "allowing" the device? Most devices don't say "This contains malware" on them...won't everyone just "allow" everything they themselves are plugging in?

What am I missing?
Score: 6 Votes (Like | Disagree)
dmylrea Avatar
13 months ago
If this is for security, then how am I (an unsuspecting victim) supposed to know NOT to allow a USB drive I am plugging in that seems perfectly safe to me? I say "Allow" and BAM! I'm still a victim. Or is this to stop usb-c driving from plugging themselves in when I'm not around?
Score: 5 Votes (Like | Disagree)
TheColtr Avatar
13 months ago

Not being sarcastic, but why is this a good thing? Are we guarding against random bad actors plugging stuff into my laptop while I’m at out in a public place? What is the risk that is being protected?
I think it’s more for those times you plug into a random usb outlet to charge. A coffee shop, hotel, or airport. Any of those could have been modified with malicious intent. That’s why iOS got the option to disallow USB data connections while locked a while back. It hasn’t been as big of a deal in the past for laptops, USBC PD is becoming powerful enough that it’s not unreasonable to plug in to a usbc port without a normal power brick.
Score: 5 Votes (Like | Disagree)

Popular Stories

gmailbeforeandafter

Gmail, Google Docs and Google Sheets Gain Support for 2018 iPad Pro Models

Monday February 4, 2019 1:51 pm PST by
Google today updated its Gmail, Google Docs, and Google Sheets apps for iOS devices, introducing support for the new 11 and 12.9-inch iPad Pro models. The update brings an optimized form factor that no longer features distracting black bars at the top and bottom of the display in portrait mode or at the sides in landscape mode. Following the update, the Gmail app takes up the entirety of the...
macos monterey

Here Are All the Macs Compatible With macOS Monterey

Monday June 7, 2021 12:17 pm PDT by
macOS Monterey is compatible with many of the Macs that were able to run macOS Big Sur, but it drops support for some older MacBook Air and iMac models from 2013 and 2014. A full compatibility list is below: iMac - Late 2015 and later iMac Pro - 2017 and later MacBook Air - Early 2015 and later MacBook Pro - Early 2015 and later Mac Pro - Late 2013 and later Mac mini -...