After installing or upgrading Avast One, Avast Security or Avast Premium Security on a Mac that is running macOS version 10.13 (High Sierra) or later, you need to allow all permissions so that your Avast product can fully protect your system. The Avast setup wizard guides you through this process. For detailed instructions, refer to the steps in this article.
- This Mac is not fully protected
- Allow us to fully protect your Mac
- Missing kernel extensions
- Missing system extensions
- Allow full disk access
- Add Avast certificates to the Keychain
Allow protection
Allowing permissions enables Avast One to protect your Mac using the real-time protection features.
- Click Let's go in the Avast One setup wizard.
- Click Open System Preferences.
- If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
- Click Allow.
- Click Continue in the Avast One setup wizard.
The necessary permissions are granted. If you are using macOS 11 (Big Sur), the Avast One setup wizard prompts you to add DNS proxy configurations. If you are using macOS 10.15 (Catalina) or lower, the Avast One setup wizard prompts you to allow full disk access.
Add DNS proxy configurations
Adding a DNS proxy to your Mac enables Avast One to actively monitor websites for threats while you browse the internet.
- Click Open confirmation dialog.
- Click Allow.
- Click Continue in the Avast setup wizard.
The necessary DNS proxy configurations are added. Continue with the steps below to allow full disk access.
Allow full disk access
Allowing full disk access enables Avast One to scan your entire Mac for hidden threats.
- Click Open system preferences in the Avast One setup wizard.
- If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
- Select Avast One using either method below:
- Tick the box next to Avast One.
- Click the
+plus icon, then select Avast One, and click Open.
- Tick the box next to Avast One.
- Click Quit & Reopen (or Quit Now on macOS 10.15.x (Catalina) and earlier).
- Click Got it.
Full Disk Access is granted for Avast One.
Add Avast certificates
Adding Avast certificates allows Avast One to stop browser threats. If you are prompted to add Avast certificates to the Keychain, follow the steps below:
- Click Let's go.
- Click Open confirmation dialog.
- Enter the password that you use when you start your Mac, then click Update settings.
- Click Continue.
- Click Got it.
All necessary permissions are now enabled.
Allow protection
Allowing permissions enables Avast to protect your Mac using the Core Shields real-time protection features.
- Click Continue in the Avast setup wizard.
- Click Open system preferences.
- Select the General tab in the Security & Privacy preferences window.
- If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
- Click Allow.
- Click Continue in the Avast setup wizard.
The necessary permissions are granted. If you are using macOS 11 (Big Sur), the Avast setup wizard prompts you to add DNS proxy configurations. If you are using macOS 10.15 (Catalina) or lower, the Avast setup wizard prompts you to allow full disk access.
Add DNS proxy configurations
Adding a DNS proxy to your Mac enables Avast to actively monitor websites for threats while you browse the internet.
- Click Open confirmation dialog.
- Click Allow.
- Click Continue in the Avast setup wizard.
The necessary DNS proxy configurations are added. If prompted, continue with the steps below to allow full disk access, otherwise, click Got it to close the Avast setup wizard.
Allow full disk access
Allowing full disk access enables Avast to scan your entire Mac for hidden threats.
- Click Open system preferences in the Avast setup wizard.
- Ensure the Privacy tab and Full Disk Access are selected.
- If your settings are locked, click the lock icon, then enter the password that you use when you start your Mac, and click Unlock.
- Select your Avast product using either method below:
- Tick the box next to your Avast product.
- Click the
+plus icon, then select your Avast product, and click Open.
- Tick the box next to your Avast product.
- If prompted, click Quit & Reopen (or Quit Now on macOS 10.15.x (Catalina) and earlier).
- If prompted, click Got it.
Full Disk Access is granted for your Avast product. All necessary permissions are now enabled.
Troubleshooting
In some cases, a problem with macOS prevents enabling the necessary permissions. This mainly affects macOS 10.13 High Sierra and macOS 10.14 Mojave. If you are unable to allow the permissions as described in this article, try one of the troubleshooting options below:
Update macOS
Updating to macOS 10.15 Catalina or macOS 11 Big Sur should resolve the issue. For instructions, refer to the following Apple Support article:
Reinstall macOS
For instructions to reinstall your macOS, refer to the following Apple Support article:
Fix manually (advanced users)
If updating or reinstalling macOS is not possible for you, you can try to fix the issue manually by following the instructions below. These steps were reported on the White Hat Mac website, where you can read more about the issue and proposed solution:
Based on the White Hat Mac article, we recommend first identifying which directory is affected by the issue, before fixing the access rights.
Identify affected directory
- Click Go ▸ Utilities in the Apple menu bar.
- Double-click Terminal in the Utilities window.
- In the Terminal window, type:
ls -alO /Library/StagedExtensions
Ensure you have correctly entered the command, then press Enter.
- In the output, check for the following code:
drwxr-xr-x@ 4 root wheel restricted
If you see only drwxr-xr-x@ 4 root wheel without the restricted text, then the Staged Extensions directory is affected and you can try to fix the access rights for this directory.
If you see no such file or directory, continue with the steps below to check the Kernel Extension Management directory. - In the Terminal window, type:
ls -alO /private/var/db/KernelExtensionManagement/
Ensure you have correctly entered the command, then press Enter.
- In the output, check for the following code:
drwxr-xr-x@ 4 root wheel restricted
If you see only drwxr-xr-x@ 4 root wheel without the restricted text, then your Kernel Extension Management directory is affected and you can try to fix the access rights for this directory.
Fix access rights
- Click the
Apple icon in the menu bar, then select Restart. 
- Immediately hold down the
⌘ Commandkey andRkey simultaneously until you see the Apple logo. - When the macOS Utilities window appears, click Utilities in the menu bar, then select Terminal.
- In the Terminal window, type the relevant code below according to which directory was missing the restricted tag:
- Staged Extensions:
chflags restricted /V*/*/private/var/db/StagedExtensions
- Kernel Extension Management:
chflags restricted /V*/*/private/var/db/KernelExtensionManagement
- Staged Extensions:
- Click the Apple icon in the menu bar, then select Restart.
You should now be able to allow all permissions by following the instructions in this article. If you continue to experience problems, contact Avast Support.
Further recommendations
For more information about your Avast product, refer to the relevant article below:
For more information about Avast One, refer to the following article:
- Avast One 21.x for Mac and later
- Avast Premium Security 14.6 for Mac and later
- Avast Security 14.6 for Mac and later
- Apple macOS 12.x (Monterey)
- Apple macOS 11.x (Big Sur)
- Apple macOS 10.15.x (Catalina)
- Apple macOS 10.14.x (Mojave)
- Apple macOS 10.13.x (High Sierra)
