Founder and editor of We Are MacWise, with more than 30 years of Apple-focused IT experience helping professionals and small businesses.
A new Mac can be usable in minutes, but a thoughtful setup prevents security gaps, missing backups, notification overload, and years of messy file organization. Work through this checklist before the computer becomes business-critical.
Editorial note: We Are MacWise is independent and is not affiliated with Apple. When affiliate links are added, we may earn a commission at no extra cost to you. Recommendations are based on usefulness and fit, not commission.
Before you begin
If this Mac belongs to an employer, stop and follow the organization’s enrollment and security process. Do not create personal administrator accounts, migrate personal data, or install software outside company policy.
For a personal or owner-managed Mac, have your Apple Account credentials, old-computer backup, essential software licenses, Wi-Fi details, and a backup drive ready.
1. Inspect the hardware and accessories
Confirm the model, memory, storage, charger, keyboard layout, ports, and display condition while the return window is open. Keep the receipt and record the serial number somewhere secure—not in a public note.
2. Install current macOS updates
Open System Settings → General → Software Update. Install the latest stable release and enable automatic security updates. Updates may change menu locations, so complete them before fine-tuning the system.
3. Decide whether to migrate or start clean
Migration Assistant can move accounts, applications, documents, and settings from another Mac or backup. A clean setup takes longer but avoids carrying abandoned software and years of clutter.
Neither choice is universally better. Migrate when continuity matters and the old Mac is healthy; start clean when troubleshooting, changing ownership, or rebuilding a poorly maintained system.
4. Create the right accounts
Use a standard account for routine work when practical and reserve administrator credentials for changes. Each regular user should have a separate account. Avoid sharing one login across a family or team.
5. Secure your Apple Account
Enable two-factor authentication, confirm trusted phone numbers and devices, and update recovery information. Only sign into iCloud services that belong on this Mac, especially if the computer is shared.
6. Review FileVault
Open Privacy & Security → FileVault and understand the recovery method before enabling or changing it. FileVault protects data when someone does not have an authorized login. Store the recovery key safely if you choose that option.
Do not enable FileVault casually on a business Mac without confirming that recovery keys are escrowed accordingly; losing all authorized credentials and recovery methods can make data inaccessible.
7. Configure screen lock and login security
Use a strong, unique login password and require authentication promptly after sleep or the screen saver. Set up Touch ID where available. Disable automatic login and review which users can unlock the Mac.
8. Review the firewall and sharing services
Under Network → Firewall, enable the firewall unless a managed environment specifies otherwise. Under General → Sharing, turn off services you do not intentionally use, including Remote Login, Screen Sharing, File Sharing, and Remote Management.
9. Audit Privacy & Security permissions
Review Location Services, Contacts, Calendars, Photos, Bluetooth, Camera, Microphone, Accessibility, Screen & System Audio Recording, Automation, and Full Disk Access. Grant access only when a trusted app has a clear operational need.
10. Configure iCloud deliberately
Choose whether to sync Photos, Passwords, Messages, Desktop and Documents, and other categories. Sync can be convenient, but it is not an independent backup. Understand Optimize Mac Storage before relying on files being locally available offline.
11. Set up passwords and passkeys
Apple’s Passwords app is a strong integrated option. Teams and mixed-platform households may benefit from an established third-party password manager. Choose one primary system, secure it with multifactor authentication, and avoid duplicate unmanaged vaults.
12. Set up Time Machine
Go to General → Time Machine, add a suitable backup disk or supported network destination, and enable encryption. Leave time for the first backup to finish, then verify that files can be browsed and restored.
Time Machine is most useful when the backup disk is connected regularly. A drive sitting unused in a drawer is not an active backup.
13. Add an off-site recovery layer
Protect irreplaceable data from theft, fire, or damage affecting both the Mac and local backup. This might be a reputable cloud-backup service or a second encrypted drive stored separately. Cloud sync alone does not provide the same recovery model.
14. Install essential apps from trusted sources
Prefer the Mac App Store or the developer’s official site. Install only what is needed now, verify subscription terms, and remove installer files afterward. Avoid “cleaner,” driver, and security utilities promoted through alarming pop-ups.
15. Configure browsers and extensions
Import only the bookmarks and passwords you want. Review search, privacy, download, and notification settings. Install as few extensions as possible because extensions can have broad access to web content.
16. Organize Finder before files accumulate
Show filename extensions, add frequently used folders to the sidebar, and choose a consistent structure for active projects, reference material, archives, and downloads. Decide where cloud-synced work belongs.
17. Tune notifications and Focus
Disable alerts that do not require timely action. Configure Focus modes for meetings, concentrated work, and personal time. Fewer interruptions improve security as well as productivity by reducing reflexive clicks.
18. Configure displays, keyboard, and trackpad
Set comfortable scaling, text size, pointer speed, scrolling, keyboard repeat, and external-display arrangement. Check ergonomic height and lighting before buying accessories to solve a problem that settings can fix.
19. Test Apple ecosystem features
If useful, test AirDrop, Handoff, Universal Clipboard, iPhone Mirroring, Continuity Camera, and calls or messages on the Mac. Disable features you do not want available on a shared or sensitive computer.
20. Create a recovery record and test it
Document the Mac model, purchase date, warranty status, backup location, account-recovery process, important licenses, and support contacts. Do not store passwords or recovery keys in an unprotected document.
Finish by testing a Time Machine restore of a noncritical file and confirming that important cloud files are available as expected.
Business setup requires more than this checklist
A company Mac should normally use automated enrollment, mobile-device management, managed Apple Accounts where appropriate, endpoint security, standardized applications, recovery-key escrow, and an offboarding process. A checklist is not a substitute for device management.
Bottom line
The essential sequence is simple: update, secure access, review encryption, minimize sharing and permissions, configure syncing deliberately, and prove that backups can restore data. Personalization comes after recoverability.
Repeat the security, software, permission, and backup checks every few months. A well-configured Mac is not a one-time project; it is a maintained system.
Frequently Asked Questions
How long does a proper new Mac setup take?
Allow one to two hours for configuration, plus additional unattended time for software updates, migration, encryption, and the first backup. Verify recovery before treating the Mac as ready.
Should I migrate from my old Mac or start clean?
Migration is efficient when the old Mac is healthy and continuity matters. A clean setup is useful when changing ownership, troubleshooting persistent problems, or avoiding abandoned software and clutter.
Should I enable FileVault?
FileVault is appropriate for most portable and work Macs, but confirm the recovery method first. Business devices should have an approved process for securely storing or escrowing recovery information.
Do Macs need third-party antivirus?
macOS includes built-in security layers. Additional endpoint protection may be appropriate for organizations, regulated environments, higher-risk users, or a specific threat model. No security product replaces updates and careful software installation.
What backup strategy should I use?
Use Time Machine or another versioned local backup plus a separate off-site copy for irreplaceable data. Cloud synchronization is helpful but should not be treated as the only backup.
Should every iCloud feature be enabled?
No. Enable only the categories appropriate for this Mac and its owner. Understand Desktop and Documents syncing, optimized storage, and the difference between synchronization and backup.
Does this checklist apply to older Macs?
Most steps apply to any Mac running a currently supported macOS version. Menu paths and available security features vary by model and software release.
Is this checklist sufficient for a company-owned Mac?
No. Company devices should follow organizational enrollment, device management, security, backup, licensing, and offboarding policies. Ask the administrator before creating accounts or installing software.
Founder and editor of We Are MacWise, with more than 30 years of Apple-focused IT experience helping professionals and small businesses.
