Hey MacTo lock private Safari windows on a Mac, enable Locked Private Browsing in Safari’s Privacy settings. It uses Touch ID or your Mac password. If you want a verification step over ordinary Safari windows too, you need a different approach, such as an app shield or a separate user account.
Start by deciding what someone should be able to see. A private shopping window, your everyday browser session, and a downloaded document are three different things to protect.
Private windows or the whole browser?
| What you want | Use | Scope |
|---|---|---|
| Keep private tabs out of view when you leave | Locked Private Browsing. | Safari’s private windows. |
| Ask for verification before viewing Safari | An app locker such as Hey Mac. | The protected app view, subject to its coverage and relock settings. |
| Let another person browse independently | A separate Mac user account. | A separate session with its own browser data. |
For a shared family Mac, a separate account is often the more useful starting point. An app shield is relevant when you want to keep your own session open while restricting selected apps.
Turn on Safari’s private-window lock
- Open Safari and choose Safari → Settings → Privacy.
- Find the Private Browsing option that requires Touch ID or a password to view locked tabs, and enable it.
- Open a private window using File → New Private Window.
- Load a harmless webpage so you can check the behavior.
Apple lists this feature for Safari 17 or later on macOS Monterey 12 or later. The setting’s wording depends on whether your Mac has Touch ID. If it is missing, check your Safari and macOS versions before looking for a third-party workaround.
The Apple Locked Private Browsing guide explains the current settings and exceptions. These Mac instructions use Safari settings; the Face ID toggle in iPhone Settings is for a different device.
Lock private windows before handing over your Mac
With private browsing in use, choose Window → Lock All Private Windows from Safari’s menu bar. Return to the private window and check that it asks you to authenticate.
Private windows also lock in situations such as locking or sleeping the Mac and leaving Safari inactive for a period. Do not assume that switching away locks them instantly. Apple documents exceptions when a private window has not loaded a webpage or is playing audio or video.
Check regular windows too. Their remaining open is expected: the private-window lock does not turn every Safari window into a password prompt.
Protect the Safari app with Hey Mac
If ordinary browser windows are the concern, Hey Mac can place a verification shield over Safari. It supports face recognition, Touch ID, or a Mac-password fallback on supported hardware. Hey Mac requires Apple silicon and macOS 14 or later; its camera recognition is different from Apple Face ID.
- Follow the Hey Mac setup guide and select App Lock if that is the feature you need.
- In Hey Mac’s App Lock settings, enable protection and add Safari.
- Choose the coverage mode and Safari’s relock policy. A switch-away policy and a timed allowance have different behavior.
- Use non-sensitive browser content to check opening Safari, authenticating, switching away, and returning after the relock condition.
- Confirm that your intended Touch ID or password fallback works before relying on the setup.
Window-only shielding can briefly expose content when windows open or move. Test the arrangement you actually use, especially with multiple windows or displays. The broader app-locking guide explains how app shields differ from account separation and encryption.
Check what remains outside the lock
Downloads remain files in Finder. Website accounts can also be signed in through another browser or device. An app shield does not sign you out of those accounts, encrypt your browsing data, or automatically hide notification previews.
Before lending your Mac, think through the task the other person needs. If they need Safari itself, a separate account avoids handing over your signed-in browser session. For private documents already downloaded, use folder encryption where appropriate.
Questions about locking Safari on Mac
Can Safari use Face ID on a Mac?
Safari’s native private-window lock uses the authentication options available on your Mac, such as Touch ID or your password. A third-party app’s webcam recognition does not add Apple’s Face ID hardware. The Face ID for Mac explainer covers that distinction.
Why can I still open my normal tabs?
Locked Private Browsing applies to private windows. Use an appropriate whole-app or separate-account approach if ordinary tabs are the content you need to keep private.
Does Screen Time give Safari the same lock?
Screen Time is intended for usage restrictions. Its behavior varies by macOS release and is covered in the app-locking guide; do not assume it reproduces a verification shield on every browser visit.
About this guide
Harshit Maurya develops Hey Mac. Reviewed November 9, 2026 using Apple’s Safari documentation and Hey Mac’s documented App Lock workflow. The checks above are instructions for your setup, not a claim of completed multi-browser or multi-display testing.