Most of us believe we are doing everything we can to keep our devices safe, but some of the best security features aren’t enabled or present on your Mac by default, and others require that you make a change and review your operational security from time to time.

Here’s how to fix that in six easy steps.

1

Enable FileVault

All modern Mac computers that use the APFS file system encrypt your data automatically. This has been the case since the days of the T2 chip that first came bundled with Intel processors and is now included in all post-M1 Apple silicon processors. When you turn your Mac on, the decryption key for the internal drive is retrieved from the “Secure Enclave” on boot, and the drive is decrypted, ready to be used.

FileVault adds another layer of protection by requiring that your login password be entered before this decryption can take place. It’s one more step you can take to secure your data, and it costs nothing to do. By default, FileVault is not enabled, but you can change this under Settings > Privacy & Security > FileVault (at the bottom of the menu).

When you enable this setting, decryption will be tied to your login password. You’ll also be given a recovery key, which you should store in a secure location just in case you ever forget your password.

Warning: You should be aware that if you somehow forget your password and lose access to the recovery key, you won’t be able to access the data on your drive.

2

Encrypt Your Time Machine Backups

Time Machine is Apple’s handy set-and-forget backup solution. While there are other solutions you can use, it makes sense for most Mac owners to stick with Time Machine. Creating backups is relatively painless, and restoring them is simple since Time Machine integrates neatly into Apple’s operating system.

This works by connecting an external drive to your Mac, like a hard drive or solid state drive, and setting up Time Machine under Settings > General > Time Machine. By default, your backups will not be encrypted; you’ll need to enable encryption to ensure that your data is secured. Without enabling encryption, anyone who gets their hands on the drive could get access to the data therein.

If you’ve already used a drive to create an unencrypted Time Machine backup, you’ll need to set it up again to use encryption. You can format the drive using Disk Utility to the APFS format, then head back to System Settings > General > Time Machine and set up Time Machine again (this time, choosing to encrypt the volume).

Be aware that if you go this route, you will be destroying your only good backup until the process is complete. A better plan might be to buy another drive (or use a spare), set up an encrypted Time Machine backup with the new drive, and then format the old drive once the backup is complete. You can have multiple Time Machine backups (just click the “+” plus button within the Time Machine menu), so this just adds another level of redundancy.

3

Install a Software Firewall

Your Mac comes with a firewall that you can enable under System Settings > Network. This only blocks incoming connections, and it can cause some problems with certain apps and services. It also does nothing to restrict outgoing connections.

This means that if you install an application that wants to transmit data somewhere, you won’t have any control over it using the built-in firewall. You’ll have no idea what remote servers an app is attempting to communicate with, nor will you be able to bar apps from talking to the broader internet.

A software firewall gives you complete control over an application’s outgoing connections. Most work using an allow-list of applications and prompts that request your permission each time an app tries to communicate with a remote server.

I use LuLu by ObjectiveSee. Not only is it free and open-source, it’s lightweight and easy to use. You can choose to wave through all existing applications on your Mac, or you can audit your entire software library. You’ll see pop-ups notifying you that an application wants to access a server, the address of the server in question, and you’ll have the option to allow it temporarily or permanently.

You can also set up your own list of custom rules, which allows you to do things like block apps from talking to specific remote servers, while allowing others. When you install LuLu, you’ll be prompted to allow the installation of a network filter. The app requires this permission to act as a supervisor, so don’t panic.

4

Switch to Open-Source Software Where Possible

At How-To Geek, we love open-source software for a variety of reasons. Not only is some of the best software in the world open-source in nature, but the projects themselves are often free to use. On top of this, open-source software has some big security benefits over traditional closed-source apps.

When an app developer releases their source code, they’re essentially showing their work for the whole world to see. Anyone can comb through this code to audit it, discover problems, suggest fixes, and make sure the app is doing what the developer claims. You can think of it as a declaration that the app developer has nothing to hide, essentially amounting to security through transparency.

One example where this could be considered important is apps that are designed to tidy up your Mac’s menu bar at the top of the screen. In order to function, you must grant permission for these apps to view the contents of your screen (just as you would a screen recording app).

This is why I use the minimalist open-source app Ice for this purpose. Granting an app permission to view the contents of my screen is not something I take lightly, but I have greater faith in an app for which the source code is plainly visible.

5

Audit Your Mac’s Permissions

Apple’s robust permissions system gives you control over what installed software can access. This includes personally identifying information like your current location and Photos library, but also locations on your drive, peripherals, and much more.

You’re probably used to seeing a pop-up every time an app asks for permission to one of these things, and it can be easy just to click “Allow” without thinking too hard about the implications. That’s why it’s a good idea to audit your Mac’s permissions on a regular basis, revoking access to apps as you see fit.

Head to System Settings > Privacy & Security to see a list of permissions that you can manage. Duck into each menu and uncheck items you’re not comfortable with. Keep in mind that by doing this, you might “break” certain features within these apps, but you can always undo the change (apps are particularly good at screaming at you when you don’t give them everything they want).

There are a few areas you’ll want to pay particularly close attention to, including:

• Location Services — your literal physical location on this planet.
• Full Disk Access — these apps can access every location on your drive, whether they need to or not.
• Input Monitoring — these apps can monitor your keyboard input, so they can see everything you type.
• Microphone and Camera — these apps can listen to your surroundings and see you, though you should get notice of both at the top of the screen.
• Screen & System Audio Monitoring — these apps can see everything you do on your screen, and even record it.
• Accessibility — these apps can control your Mac directly.

6

Use a VPN

A virtual private network, or VPN for short, is one of the easiest ways of adding another layer of security to your Mac. A VPN has all sorts of benefits, but the security benefits of encrypting all of your web traffic should be self-evident. This includes everything you’re doing in a web browser, plus any other apps you’re using.

With the advent of HTTPS, your web browsing activity is considered far more secure than it once was. While your internet service provider can’t necessarily spy on your browsing session, metadata gives away a lot of what you’re doing, and DNS lookups can reveal which websites you visited and when.

With a VPN that’s properly secured against DNS leaks, the only thing that your ISP can see is that you’re encrypting your internet traffic. This isn’t a silver bullet, for example if your school has a no VPN policy it could get you in trouble, but it’s a great first step to keeping your internet activity private while reaping other benefits like accessing geofenced content.

Choosing a VPN is a decision you should make carefully. We’ve got a list of VPN services we personally recommend, but you should do your own research. I’m using ExpressVPN right now, but we’ve recommended NordVPN a fair bit in the past, and services like ProtonVPN and Mullvad have solid reputations among the security-conscious.

Bonus: Change Your DNS Servers

If you’re using a VPN, you don’t need to worry about this since your DNS requests should already be hidden from plain sight. But if you’re going VPN-free for now, one simple improvement you can make is to change your DNS servers. This is the easiest way to hide which URLs you’re accessing from your internet service provider.

Choosing a DNS server is pretty easy after running a simple speed test. Once you’re done, you can change this setting under System Settings > Network by choosing your active connection (Wi-Fi or Ethernet) and then using the “Details” button to add your own DNS server.

Some of these changes take a few seconds to action, while others can take a bit more time and research. All of them will help boost your Mac’s security, so they’re all worth considering.

See at Peacock

Watch the Summer Series in the US from $11 a month

Peacock

61% off with 2yr plan (+4 free months)

See more details

See at Now

Watch the Summer Series in the UK from £15 with Now

Now

See at Fubo

Watch the Premier League in Canada from CA$30 a month

Fubo Canada

Two sides that made made winning starts to the EPL Summer Series tournament face off at Soldier Field on Wednesday as Man United face Bournemouth. 

Below, we’ll outline the best live TV streaming services to use to watch the game as it happens, wherever you are in the world, and how to use a VPN if it’s not available where you are.

A brace from skipper Bruno Fernandes saw Man United edge West Ham 2-1 in their opening match, with manager Ruben Amorim delighted with the showings from new signings Matheus Cunha and Diego Leon.

Bournemouth boss Andoni Iraola will also have been encouraged with his team’s performance in their 3-0 hammering of Everton at MetLife Stadium on Saturday, with Philip Billing, Dango Ouattara and Daniel Adu-Adjei all getting on the scoresheet. 

Manchester United takes on AFC Bournemouth on Wednesday, July 30, at Soldier Field in Chicago. Kickoff is set for 9:30 p.m. ET local time, 6:30 p.m. PT in the US. That makes it an 2:30 a.m. BST start in the UK and an 11:30 a.m. AEST kickoff in Australia on Thursday morning.

How to watch Man United vs. Bournemouth in the US without cable

Wednesday’s Man United vs. Bournemouth game will be broadcast on NBC and can also be streamed via Peacock. You’ll need a Peacock Premium or Premium Plus account to catch the game live. 

Peacock offers two Premium plans and after the recent price increases, the ad-supported Premium plan costs $11 a month and the ad-free Premium Plus plan is $17 a month.

How to watch the Premier League Summer Series 2025 from anywhere with a VPN

If you’re traveling abroad and want to keep up with all the Summer Series action while away from home, a VPN can help enhance your privacy and security when streaming. 

It encrypts your traffic and prevents your internet service provider from throttling your speeds, and can also be helpful when connecting to public Wi-Fi networks while traveling, adding an extra layer of protection for your devices and logins. VPNs are legal in many countries, including the US and Canada, and can be used for legitimate purposes such as improving online privacy and security. 

However, some streaming services may have policies restricting VPN use to access region-specific content. If you’re considering a VPN for streaming, check the platform’s terms of service to ensure compliance. 

If you choose to use a VPN, follow the provider’s installation instructions, ensuring you’re connected securely and in compliance with applicable laws and service agreements. Some streaming platforms may block access when a VPN is detected, so verifying if your streaming subscription allows VPN usage is crucial. 

Price $13 per month, $100 for the first 15 months (then $117 per year) or $140 for the first 28 months (then $150 per year)Latest Tests No DNS leaks detected, 18% speed loss in 2025 testsNetwork 3,000 plus servers in 105 countriesJurisdiction British Virgin Islands

ExpressVPN is our current best VPN pick for people who want a reliable and safe VPN, and it works on a variety of devices. It’s normally $13 a month, but if you sign up for an annual subscription for $100 you’ll get three months free and save 49%. That’s the equivalent of $6.67 a month.

Note that ExpressVPN offers a 30-day money-back guarantee.

61% off with 2yr plan (+4 free months)

Livestream Man United vs. Bournemouth in the UK

This Summer Series match at Soldier Field is exclusive to Sky Sports, showing on its Sky Sports Main Event, Premier League and UHD channels. If you already have Sky Sports as part of your TV package, you can stream the game via its Sky Go app. Cord-cutters will want to get set up with a Now account and a Now Sports membership to stream the game. 

Sky subsidiary Now offers streaming access to Sky Sports channels with a Now Sports membership. You can get a day of access for £15, or sign up to a monthly plan from £35 a month right now.

Livestream Man United vs. Bournemouth in Canada

If you want to stream this EPL Summer Series game live in Canada, you’ll need to subscribe to Fubo Canada. The service has exclusive rights to every match of the preseason tournament once again this year.

Fubo is the go-to destination for Canadians looking to watch this preseason tournament with exclusive streaming rights to every match. It costs CA$30 a month, though you can save some cash by paying quarterly or annually.

Livestream Man United vs. Bournemouth in Australia

Football fans down under can watch Summer Series matches live on streaming service Stan Sport, which is showing every game of the tournament live in Australia.

Stan Sport will set you back AU$20 a month (on top of a Stan subscription, which starts at AU$12). It’s also worth noting that the streaming service is currently offering a seven-day free trial.

A subscription will also give you access to Premier League, Champions League and Europa League action, as well as international rugby and Formula E.

Quick tips for streaming the Summer Series using a VPN 

• With four variables at play — your ISP, browser, video streaming provider and VPN — your experience and success when streaming Summer Series matches may vary.
• If you don’t see your desired location as a default option for ExpressVPN, try using the “search for city or country” option.
• If you’re having trouble getting the game after you’ve turned on your VPN and set it to the correct viewing area, there are two things you can try for a quick fix. First, log into your streaming service subscription account and make sure the address registered for the account is an address in the correct viewing area. If not, you may need to change the physical address on file with your account. Second, some smart TVs — like Roku — don’t have VPN apps you can install directly on the device itself. Instead, you’ll have to install the VPN on your router or the mobile hotspot you’re using (like your phone) so that any device on its Wi-Fi network now appears in the correct viewing location.
• All of the VPN providers we recommend have helpful instructions on their main site for quickly installing the VPN on your router. In some cases with smart TV services, after you install a cable network’s sports app, you’ll be asked to verify a numeric code or click a link sent to your email address on file for your smart TV. This is where having a VPN on your router will also help, since both devices will appear to be in the correct location. 
• And remember, browsers can often give away a location despite using a VPN, so be sure you’re using a privacy-first browser to log into your services. We normally recommend Brave.