Where Is the macOS TCC Database?
macOS TCC.db privacy database with camera, mic and folder access grants.
Last updated
macOS records camera, microphone, folder and automation grants in TCC.db SQLite databases, one system-wide plus one per user. Every allow click lands here with timestamps and bundle IDs.
System Integrity Protection guards the system copy against edits. Audits read the user copy to find over-permissioned apps before revoking.
Where macOS stores this, by platform
~/Library/Application Support/com.apple.TCC/TCC.db
Per-user privacy grants for camera, mic, files, automation and more. The system copy sits in /Library/Application Support/com.apple.TCC under SIP protection. Query read-only with sqlite3; writes need TCC bypass entitlements or recovery mode. Revoke through System Settings rather than editing.
Frequently asked questions
How do I audit app permissions on Mac?
Query the access table in the database above for grants by bundle ID. Revoke findings in Privacy & Security settings.
Can I edit TCC.db directly?
The user copy allows reads freely, but writes need special entitlements. Use tccutil reset for supported services instead.
Notice an outdated path? Let us know.