Stop Safari auto-opening downloads on Mac (security)

Safari has a setting that opens "safe" downloads the moment they finish — images, PDFs, archives, even disk images. It's a convenience with a real security cost: it hands a freshly downloaded file the first move. Turn it off in Safari → Settings → General so nothing opens until you look at it and decide. This is a Safari-only setting; it doesn't govern Chrome, Firefox, or any other browser.

Why auto-open is a risk worth closing

Apple's "safe" list is about file types, not file contents. Safari treats categories like images, PDFs, text, archives, and disk images as safe to open automatically — but a malicious PDF, a booby-trapped archive, or a disk image that mounts and shows a fake installer all fall inside that list. Auto-open means the file reaches an app, mounts a volume, or expands its contents before you've had a chance to check where it came from. Turning the setting off restores the normal order: download first, inspect, then open only if you meant to.

Turn off "Open safe files after downloading"

1. Open Safari.
2. Choose Safari → Settings (or press Cmd+,).
3. Click the General tab.
4. At the bottom, untick Open "safe" files after downloading.

That's the whole fix, and it takes effect immediately. Prefer the command line? The same setting is one preference key. Reverse it any time with the second line:

# Stop Safari opening downloads automatically
defaults write com.apple.Safari AutoOpenSafeDownloads -bool false

# Undo — allow safe files to auto-open again
defaults write com.apple.Safari AutoOpenSafeDownloads -bool true

Quit and reopen Safari afterward. One caveat: Safari's preferences live in a protected container, so a defaults command only works if Terminal has Full Disk Access (System Settings → Privacy & Security → Full Disk Access). If you'd rather not grant that, the Settings checkbox above is the reliable route. This works on macOS 13 Ventura, 14 Sonoma, and 15 Sequoia.

What still protects you

Switching this off isn't your only defence — it just removes an unnecessary head start. macOS still adds a quarantine flag to anything Safari downloads, so Gatekeeper checks the file and shows the "downloaded from the internet" warning the first time you open it. You can inspect that flag yourself with the quarantine attribute, and if you're weighing broader protection, see whether a Mac needs antivirus. For anything unexpected, the safest move is not to open it at all — delete it from Downloads.

Only Safari obeys this setting

This toggle lives inside Safari and affects Safari alone. Chrome, Firefox, Edge, and Brave each have their own download-handling preferences, and none of them read Safari's setting. If you use more than one browser, turn off auto-open in each — this guide covers Safari.