How to Lock Apps on Your Mac

Your Mac trusts whoever is sitting in front of it. Once you are logged in, every app is one click away, and macOS does not ask any further questions. That is fine when you are the only person who ever touches your machine. It stops being fine the moment a coworker borrows your laptop to check something, a friend wants to look up directions, or a child opens the lid to play a game.

This guide covers how to lock individual apps on your Mac so that opening them requires Touch ID or your password, even when the Mac itself is already unlocked.

Why macOS does not lock apps by default

Apple builds the login screen as a single gate. Pass it once and you have the run of the system. There is no built-in setting to require a fingerprint before Messages, Photos, or your password manager will open. A few apps add their own lock, but the coverage is patchy and inconsistent, and most of the apps you actually care about offer nothing at all.

People try to work around this with separate user accounts, fast user switching, or simply locking the whole screen every time they step away. Those help, but they are blunt. You should not have to log out of your own session just to stop someone reading your texts while you grab a coffee.

What locking an app actually does

A proper app lock sits in front of the application at launch. When someone double-clicks the icon, taps it in the Dock, or finds it through Spotlight, the lock intercepts that launch and asks for authentication before the app is allowed to open. If the person cannot pass Touch ID or enter your password, the app stays closed.

This is different from logging out of an account inside the app. An in-app logout can be undone by logging back in, and many apps keep you signed in for weeks. A launch-level lock does not care about the app’s own session. It simply refuses to open the app to anyone who is not you.

How to lock an app with Cloak

Cloak was built to add this missing gate to macOS. The setup takes about a minute.

1. Download Cloak from trycloak.app and open it. There is no account to create.
2. Choose Add App and pick the application you want to protect.
3. Turn on the lock and select Touch ID. Your Mac password works as a fallback by default. If other people know that password, turn the fallback off in Settings and use a separate Cloak password instead.
4. Quit the app if it is running, then open it again. Cloak now asks for Touch ID before the app will launch.

You can repeat this for as many apps as you like. Messaging apps, your browser, your notes, your email, anything that holds something private is a good candidate. If you want a starting point, see our guides on how to lock WhatsApp on Mac, lock Messages on Mac, and lock Photos on Mac.

If you turn on intruder photos in Cloak, it also takes a picture with the built-in camera of anyone who gets the password or Touch ID wrong, so you know who tried. The photos are waiting for you the next time you open Cloak.

Which apps are worth locking

A useful way to decide is to ask what a stranger could learn or do with thirty seconds inside each app. Your email is usually the worst case, because it is the reset point for every other account you own. After that, think about:

• Messaging apps, which hold conversations you would never read aloud.
• Your browser, which stays signed into banking and social accounts.
• Notes and password managers, where people keep the keys to everything.
• Photos, the most personal archive most of us own.

You do not need to lock everything. Lock the handful of apps that would genuinely cause harm or embarrassment if opened, and leave the rest alone so your Mac still feels like your Mac.

A note on convenience

The reason most people never lock anything is friction. If protection is annoying, you turn it off. Touch ID solves this well, because a fingerprint is faster than typing a password and faster than the mental cost of worrying about who might look. Set it once and the daily overhead is close to zero.

Locking apps is one of the cheapest privacy upgrades you can make on a Mac. It does not slow your machine down, it does not send anything to the cloud, and it closes the most common gap in everyday Mac privacy: the unlocked laptop sitting on a desk.

If you want to add this gate to your own Mac, Cloak handles it with Touch ID and a one-time purchase, with everything staying local to your machine.

Questions people ask