**Multiple Options: Apple Icon on top left > System Settings. Or Spotlight Search for 'System Settings' by pressing command+space on your keyboard**
## Apple Account
#### Sign-In & Security
- Two-Factor Authentication: On
#### iCloud
- Advanced Data Protection: On
- Access iCloud Data on the Web: Off
<br>**IMPORTANT NOTE:** Advanced Data Protection means you'll be handling your own encryption keys. If you lose this information Apple will not be able to recover your data!
<br>Note: Keep tabs on what you're using iCloud for and make sure it's only enabled for applications you need.
## Wi-Fi
#### Network Settings
- Ask to join hotsposts: Off
- Wifi Network 'Details' > Private Wi-Fi address
- Fixed or Rotating
<br>Note: Fixed will use a new, unique MAC address on that specific network. Rotating will cycle through new MAC addresses periodically.
## Bluetooth
- Bluetooth: Off
## Network
- Firewall > Firewall: On
- Options >
- Block all incoming connections: On **Note: EXTREME and may break many programs unless you manually exclude them**
- Enable stealth mode: On
## General
#### Software Update
- Automatic Updates >
- Download new updates when available: On
- Insall macOS updates: On
- Install application updates from the App Store: On
- Install Security Responses and system files: On
#### AirDrop & Handoff
- Allow Handoff between this Mac and your iCloud devices: Off
- AirDrop: No One or Contacts Only
- AirPlay Receiver: Off
- Allow AirPlay for: Current User
- Require password: On
#### Login Items & Extensions
Note: Generally keep tabs on programs and extensions in this menu and keep it as minimal as possible.
## Siri
- Siri: Off
- Siri history: Delete Siri & Dictation History
## Notifications
#### Notification Center
- Show previews: When Unlocked or Never
## Focus
- Focus status: Off
## Privacy & Security
#### Location Services
- Location Services: Off
#### General Permissions (Calendars, Contacts, Files & Folders, Full Disk Access, HomeKit, Media & Apple Music, Passkeys Access, Photos, Reminders, etc.)
Note: Generally keep tabs on all permissions and restrict as many as possible. The fewer permissions granted the better.
<br>Note: Malware can still be hosted on the App Store. And denying other sources may heavily restrict software you can run. This is only a feature to enable if you don't trust other sources of installing applications.
