macOS background processes that use the network
Open Activity Monitor on a quiet Mac and you will still find dozens of processes talking to the internet. Most of them are supposed to be there: macOS splits its work across many small background services, so "one app" you never opened can be four separate daemons. This index explains what each one is, why it uses the network, roughly how much it should be using, and whether you can safely turn it off. Names are listed exactly as they appear in Activity Monitor, because that is what you are looking at when you come here.
Read the group headings as advice, not instructions. "Optional" means the feature is not required for macOS to work — it does not mean you will not miss it. rapportd, for example, is what powers Handoff, Universal Clipboard and Sidecar; plenty of people use those every day. Find out what a process actually does before deciding it is expendable.
Where you turn something off matters. If macOS has a setting for the feature, use that setting — the work is then never queued, which is cleaner and more predictable than letting it start and blocking it at the network layer. Each page below names the System Settings location where one exists. Blocking with a tool like Bytetally is the fallback for the cases where Apple exposes no switch, or where you want the feature most of the time and only need to rein it in on a metered connection.
Optional — check what it does first
adprivacyd — Ad PrivacyManages advertising privacy (opting out of targeted ads) and syncs related data with Apple.
amsengagementd — Apple media promotionsHandles promotions, recommendations and notifications for Apple's media apps (App Store, Music, TV, Books, News) and syncs engagement metrics with Apple.
assistantd — Siri & DictationPowers Siri and dictation, sending voice requests to Apple for processing (unless fully on-device).
xpc — Usage reportingReports usage/diagnostic data related to Apple's cloud services back to Apple.
controlcenter — Control CenterThe Control Center UI; its notable network use is acting as the AirPlay Receiver listener.
familycircled — Family SharingSyncs Family Sharing state (purchases, screen time, parental controls).
gamed — Game CenterGame Center — leaderboards, achievements and game friends, connecting to Apple's servers.
helpd — Help contentBacks the Help menu: indexes app help books and fetches/updates online help content from Apple.
nbagent — Update NoticesThe Noticeboard agent — connects to Apple to fetch "upgrade macOS" and software-update nag notifications.
ndoagent — Device OutreachThe New Device Outreach agent — phones home to fetch AppleCare/warranty upsell offers for your Mac.
netbiosd — Legacy file sharingRegisters/browses names on the local network for compatibility with old Windows file sharing.
parsec-fbf — Siri search analytics uploadPeriodically batches and uploads Siri / Spotlight search analytics to Apple (roughly hourly).
parsecd — Spotlight Web SearchBackend for Spotlight web suggestions, dictionary, and Siri lookups.
PasswordBreachAgent — Leaked-password checkSafari's compromised-password check: compares an encrypted fragment of your saved passwords against known-breach lists online — never your actual passwords.
privatecloudcomputed — Private Cloud ComputeOn-device orchestrator for Apple Intelligence requests offloaded to Apple's Private Cloud Compute (attestation + forwarding).
promotedcontentd — Apple Ads DeliveryFetches and serves Apple's own ads ("promoted content") in the App Store, News and Stocks.
rtcreportingd — Call quality diagnosticsCollects call-quality diagnostics for FaceTime and video Messages when you've opted into sharing analytics with Apple.
SubmitDiagInfo — Diagnostics SubmitOpt-in service that periodically uploads crash/diagnostic & usage reports to Apple.
tipsd — Tips contentBackground service for the built-in Tips app — occasionally downloads tip collections from Apple's CDN.
translationd — TranslationThe service behind system Translate; sends text to Apple's servers unless you switch to On-Device mode.
triald — Feature experimentsFetches/uploads Apple's on-device feature-experiment (rollout) config.
WeatherKitService — Weather serviceBacks the Weather widget/app and weather lookups in other apps.
corespeechd — Speech recognitionThe speech front end behind “Hey Siri” and voice recognition.
mediaanalysisd — Photo analysisAnalyses your photos for Live Text, Visual Look Up and Enhanced Visual Search.
searchtoold — Search back end (macOS 26)The search daemon new in macOS 26.
ContinuityCaptureAgent — Continuity CameraContinuity Camera — using your iPhone as the Mac's camera or microphone.
siriknowledged — Siri knowledge lookupsHandles the Siri requests that need something looked up — weather, facts, conversions.
Don't block — throttle instead
bird — iCloud Drive engineUploads/downloads files for iCloud Drive and Documents in the Cloud.
cloudd — iCloud sync (CloudKit)iCloud's sync channel — syncs app data and Photos with Apple servers.
accessoryupdaterd — Accessory FirmwareDownloads and installs firmware for Apple/HomeKit accessories (AirPods, etc.
AddressBookSourceSync — Contacts sync helperSyncs Contacts two-way with iCloud, Google, Exchange and similar accounts.
aerials — Aerial WallpapersDownloads Apple's 4K aerial screensaver/wallpaper videos on demand (each clip is hundreds of MB).
AMPLibraryAgent — Music Library AgentManages your Apple Music / TV library and syncs it to iCloud, including downloading metadata.
amsaccountsd — Apple Media Services accountsAccount hub for the App Store, Apple Music, Apple TV and other Apple media services: keeps you signed in, checks subscriptions, syncs account settings across devices.
appstoreagent — App Store agentSupporting agent for the Mac App Store: download staging, certificate check, installed-app index.
appstored — App Store background serviceChecks for and downloads Mac App Store app updates in the background.
assetsubscriptiond — OS asset downloadsDownloads OS resources on demand: language dictionaries, fonts, dynamic wallpapers, voice packs.
cloudphotod — iCloud Photos SyncUploads and downloads your photos and videos to keep iCloud Photos in sync across devices.
dataaccessd — Calendar syncSyncs calendars with your internet accounts (Google, Exchange, iCloud).
ExternalModelService — Xcode AI ModelDownloads Xcode's on-device predictive code-completion model (~2 GB) from Apple and does region checks.
itunescloudd — Apple Music cloud librarySyncs your Apple Music / iTunes library with iCloud — playlists, songs, purchase info — so it looks the same on all your devices.
itunesstored — iTunes / Media StoreHandles Media / iTunes Store activity — purchases, downloads and re-downloads of music, movies, TV and books, plus receipt checks.
mobileassetd — On-demand system assetsApple's on-demand download manager: security definitions (XProtect), Siri voices, dictionaries, fonts, timezone data.
softwareupdated — Software UpdateChecks for macOS / firmware updates and downloads them in the background.
EdgeUpdater — Edge UpdaterMicrosoft's background updater for the Edge browser.
GoogleUpdater — Google UpdaterGoogle's background updater that keeps Chrome and its extensions up to date.
updater — Zoom UpdaterZoom's background auto-updater that keeps the Zoom client current, installing updates when Zoom is idle.
storedownloadd — App Store downloadsThe App Store's download engine.
SpeechDataInstallerd — Voice pack installerDownloads and installs the offline voice and language resources behind dictation, Spoken Content and Voice Control.
modelmanagerd — Apple Intelligence modelsManages the on-device models behind Apple Intelligence.
backupd — Time MachineTime Machine.
WallpaperAgent — Wallpaper agentApplies your wallpaper and screen saver settings and coordinates the extensions that supply them — static, dynamic and aerial alike.
Leave these alone
apsd — Apple Push NotificationsMaintains the persistent connection to Apple Push Notification Service (APNs) so apps can receive push notifications.
mDNSResponder — Bonjour / DNS resolverSystem-wide DNS resolver + Bonjour service discovery on the local network.
nsurlsessiond — Background transfersRuns background URLSession transfers for apps and iCloud (photos, documents, software updates).
rapportd — Continuity / Handoff linkCoordinates Handoff, Universal Clipboard, Sidecar, AirDrop signaling, device pairing and Apple Watch auto-unlock.
trustd — Certificate checksEach time you reach a secure site or open a signed app, it checks online whether the certificate is valid and not revoked.
accountsd — Accounts FrameworkThe system service that manages all your signed-in accounts (iCloud, Mail, Google, etc.
airportd — Wi-Fi serviceManages the Wi-Fi radio/interfaces (auto-connect, scanning).
akd — Apple ID authenticationRefreshes your Apple ID sign-in credentials for iCloud, App Store, FaceTime, etc.
appleaccountd — Apple Account serviceManages your Apple Account on this Mac: sign-in status, account availability checks, recovery contacts, Digital Legacy.
authentication — Apple ID auth agentPer-user Apple ID / iCloud credential-verification helper (CoreServices).
AppleIDSettings — Apple ID SettingsThe Apple ID / iCloud pane in System Settings.
askpermissiond — Ask-to-Buy / ApprovalHandles permission flows like Family Sharing "Ask to Buy" and Screen Time approvals, relaying requests/approvals via Apple.
captiveagent — Captive Portal DetectProbes captive.
configd — System network configCore network-configuration service — assigns IP addresses and tracks link/Wi-Fi status.
FeatureAccessAgent — iCloud SubscriptionUser agent (macOS 15+) that checks and manages iCloud / iCloud+ subscription status with Apple.
findmydeviced — Find My deviceReports this Mac's status to the Find My network.
homed — Home (HomeKit)Controls your HomeKit smart-home accessories and syncs home state through iCloud.
PasswordManagerBrowserExtensionHelper — iCloud Passwords HelperNative bridge (macOS 14+) letting the iCloud Passwords browser extension read your iCloud Keychain for autofill.
iCloudHelper — iCloud sign-in helperA background helper that manages your iCloud account tokens and exchanges data between your Mac and iCloud.
iCloudNotificationAgent — iCloud Notify AgentHandles iCloud change notifications so your Mac learns when iCloud data updates on other devices.
identityservicesd — iMessage / FaceTime identityManages identity for iMessage, FaceTime, and Continuity.
ITunesSoftwareService — Xcode Upload ServiceXcode helper that talks to App Store Connect — uploading builds and running notarization.
MDRemoteServiceSupport — Device Link SupportA MobileDevice helper that discovers and connects your Mac to nearby iPhones/iPads (iPhone Mirroring, Finder, Xcode) over a direct device link.
mobileactivationd — Device ActivationHandles device activation and the identity checks needed for company enrollment, via Apple's activation servers.
NRDUpdated — Recovery UpdaterKeeps the macOS System Recovery environment up to date, downloading recovery components over the network.
passd — Wallet & PayManages Apple Pay and Wallet — syncing passes, tickets and cards and receiving their push updates.
remindd — Reminders SyncThe background process behind Reminders.
SafeBrowsing — Safari Safe BrowsingPowers Safari's Fraudulent Website Warning: checks an encrypted form of the site you're visiting against known-malicious lists online (relayed via Apple).
Service — Safe Browsing ServiceThe helper behind Safari Safe Browsing that performs the actual online checks for the Fraudulent Website Warning.
sbd — iCloud Secure BackupSecurely backs up encrypted sensitive data (notably your Keychain passwords) to iCloud about once a day.
searchpartyuseragent — Find My NetworkPart of Find My's offline-finding — relays encrypted location reports to/from Apple's servers so lost devices can be located.
sharingd — AirDrop & HandoffThe Sharing service behind AirDrop, Handoff, Universal Clipboard and Continuity — peer-to-peer between your own nearby devices, not the internet.
sntp — Time sync (SNTP)Used for basic time sync over the network (day-to-day sync is done by timed).
storekitagent — In-app purchase agentApple's helper for in-app purchases and subscriptions.
swcd — App–website linkingFetches a site's association file to verify the link between an app and its website (Universal Links, password autofill).
swtransparencyd — Software integrity checkVerifies the integrity and trustworthiness of software for features like Apple Intelligence.
syspolicyd — Gatekeeper checksGatekeeper's service.
timed — Time SyncKeeps the clock accurate by syncing over the internet about every 15 minutes.
transparencyd — iMessage key verificationSecurity guard for iMessage encryption: periodically checks Apple's public key-transparency log to make sure the encryption keys in your conversations are genuine.
webprivacyd — Web Privacy ListsPeriodically downloads list data for web tracking protections (anti-tracking / link-tracking removal).
WiFiAgent — Wi-Fi User AgentUser agent that performs Wi-Fi tasks for airportd (joining networks, password prompts).
cloudconfigd — Company device enrollmentThe enrollment client for company-wide deployment (DEP); asks Apple whether this Mac should join company device management.
kandji-daemon — Kandji AgentKandji's background process — the device-management and security agent on company-managed Macs.
kandji-library-manager — Kandji EnforcementKandji component that installs and continuously enforces assigned Library Items (apps, scripts, security settings) on a managed Mac.
kandji-parameter-agent — Kandji ParametersKandji Agent component that evaluates and auto-remediates security 'Parameters' on a managed Mac.
managedappdistributionagent — Managed app agentPer-user agent for managedappdistributiond that handles user prompts and per-user managed-app installs.
managedappdistributiond — Managed app installInstalls/manages apps pushed by company device management (and, in the EU, third-party app marketplaces), downloading from org/marketplace sources.
mdmclient — Device management (MDM)The MDM client built into macOS.
neagent — Network extension hostHosts VPN, content-filter and DNS-proxy app extensions.
CFNetworkAgent — Proxy script evaluationEvaluates PAC (proxy auto-config) scripts to decide which requests go through a proxy.
fileproviderd — Cloud drive coordinatorCoordinates on-demand files for iCloud Drive and third-party cloud drives (Dropbox, OneDrive, Google Drive).
Too small to bother with
syncdefaultsd — iCloud preferences syncSyncs the iCloud key-value store (NSUbiquitousKeyValueStore) — small app settings — across your iCloud-signed-in devices.
amsondevicestoraged — Media on-device storageOn-device storage housekeeping for Apple's media services; occasionally fetches service config from Apple.
AssetCacheLocatorService — Content Cache LocatorDiscovers macOS Content Caches on the local network so Apple downloads can be served from a nearby Mac.
commerce — App Store commerceTalks to the App Store / iTunes store backend for receipts, license refresh, in-app purchase verification.
dasd — Background task schedulerThe system's background-task scheduler; schedules low-priority work (backups, indexing, sync).
geod — Maps servicesGeoServices backend for Maps: map tiles, geocoding, directions.
locationd — Location ServicesmacOS location engine.
widget — News WidgetThe Apple News widget pulling top-story headlines from Apple News (US/UK/CA/AU only).
remoted — Nearby device discoveryConstantly looks for your other Apple devices nearby (Handoff, AirPlay, iPhone Mirroring, Xcode device connections).
SoftwareUpdateNotificationManager — Update NotifierShows notifications about available macOS updates.
widget — Stocks WidgetThe Stocks widget refreshing ticker quotes throughout the day.
storeuid — Store UI PromptsShows App Store account and rating/review popups.
symptomsd — Network health monitormacOS's built-in network doctor (Symptom framework) — watches connection quality in the background to detect Wi-Fi and network problems.
UpdateBrainService — Update preparationThe update "brain" — prepares, verifies and stages the macOS update package for this Mac (validating with Apple online).
widget — Weather WidgetThe Weather widget refreshing forecast data from Apple's weather service.
wifivelocityd — Wi-Fi diagnosticsHelper for Apple's Wi-Fi quality diagnostics.
studentd — Classroom AgentApple Classroom education agent, shipped on every Mac.
photolibraryd — Photos library serviceThe local service behind your Photos library — indexing, thumbnails, albums.
This is traffic you started
networkserviceproxy — iCloud Private RelayThe client engine for iCloud Private Relay.
ClashXPro — Proxy clientForwards other apps' traffic through proxy servers.
CoreDeviceService — Apple device communicationChannel used by iPhone Mirroring and developer tools to talk to your Apple devices.
nwextension — VPN tunnelEncapsulates other apps' traffic inside the corporate VPN tunnel.
IMTransferAgent — iMessage attachmentsUploads and downloads the photos, videos and files you send or receive in Messages, via iCloud content servers.
remotepairingd — iPhone Mirroring / device pairingCarries iPhone Mirroring and trusted pairing with your iPhone/iPad.
replicatord — iPhone widgets / Mirroring syncSyncs data for iPhone widgets on your Mac desktop and for iPhone Mirroring.
surge-mac — Proxy client (Surge)Forwards other apps' traffic through proxy servers.
macos — Tailscale mesh VPNProvides encrypted mesh networking for other apps.
Networking — WebKit networking processThe shared networking process WebKit uses whenever an app shows web content (Safari, Mail, or any app embedding a web view).
Google Chrome Helper — Google Chrome HelperChrome's child processes — this is what “Google Chrome Helper” in Activity Monitor is.
Microsoft Edge Helper — Microsoft Edge HelperEdge's child processes.
Slack Helper — SlackSlack, including its helper processes.
WeChat — WeChatWeChat and its helper process.
WeChatAppEx — WeChat Mini ProgramsWeChat's Mini Program container.
See exactly how much it used
Bytetally tracks every process on your Mac separately — upload and download, live and historical. All on-device.
Download Free on the Mac App StoremacOS 14 Sonoma or later · 100% on-device · No account