McAfee has a reputation for being harder to remove than it was to install. Whether it came pre-loaded on a new Mac, arrived bundled with another download, or you simply no longer want it, dragging the app to the Trash is not enough. McAfee installs background agents, login items, launch daemons, and kernel extensions that keep running, keep sending notifications, and keep prompting you to renew, even after the main app is gone. This guide walks through every step to completely remove McAfee from Mac, silence the pop-ups, and clean up the files left behind.
Why McAfee Is Hard to Remove from Mac
McAfee Total Protection and its older variants (LiveSafe, Internet Security, Endpoint Security) all install components outside the main app bundle. These include:
- Menu-bar agents that relaunch themselves on login
- Launch daemons and launch agents stored in
/Library/LaunchDaemons/and~/Library/LaunchAgents/ - Privileged helper tools in
/Library/PrivilegedHelperTools/ - Kernel extensions (on older macOS versions) or System Extensions (on Sonoma and later)
- Residual scanner databases and quarantine logs in
/Library/Application Support/McAfee/
Until all of these are removed, McAfee can respawn its menu-bar icon, keep firing notifications, and use CPU in the background. The good news: you can remove every piece manually, and this guide covers both the manual route and a faster alternative.
Step 1: Quit All McAfee Processes
Before deleting anything, stop the running processes so macOS does not lock the files.
- Open Activity Monitor (Finder → Applications → Utilities → Activity Monitor).
- Search for
McAfeein the search box. - Select each McAfee process and click the X (Force Quit) button. Common process names include
McAfeeAgent,masvc,MFEFirewall,mcods, andMcAfeeSecurity.
Alternatively, open Terminal and run:
sudo pkill -9 -f McAfee
sudo pkill -9 -f masvc
You will be prompted for your Mac's administrator password.
Step 2: Use McAfee's Own Removal Tool (If Available)
McAfee publishes an official removal tool called MCPR (McAfee Consumer Product Removal). It is the fastest starting point.
- Visit McAfee's support site and search for "MCPR Mac" to find the current download. The file is typically named
MCPR.appor packaged as a.dmg. - Open MCPR, accept the license, and let it run. It will ask for your administrator password.
- Restart your Mac when prompted.
MCPR removes the main product layers but does not always catch every cache file, support folder, or log. Continue with Steps 3 and 4 to verify nothing is left.
Step 3: Delete the Main App and Support Files Manually
If MCPR is unavailable or you prefer the manual route, here is where McAfee stores its files on macOS Sonoma, Sequoia, and Tahoe.
Applications folder
/Applications/McAfee Total Protection.app/Applications/McAfee Security.app
Drag these to the Trash or delete via Terminal:
sudo rm -rf "/Applications/McAfee Total Protection.app"
sudo rm -rf "/Applications/McAfee Security.app"
Application Support
sudo rm -rf /Library/Application\ Support/McAfee
rm -rf ~/Library/Application\ Support/McAfee
Caches
rm -rf ~/Library/Caches/com.mcafee.*
sudo rm -rf /Library/Caches/com.mcafee.*
Preferences
rm -rf ~/Library/Preferences/com.mcafee.*
sudo rm -rf /Library/Preferences/com.mcafee.*
Logs
sudo rm -rf /Library/Logs/McAfee
rm -rf ~/Library/Logs/McAfee
Step 4: Remove McAfee Launch Agents and Daemons (Critical for Stopping Pop-Ups)
This is the step most guides skip, and it is why McAfee keeps coming back. Launch agents and daemons tell macOS to restart McAfee processes on login or on a schedule.
Unload and delete launch daemons (system-wide)
sudo launchctl list | grep -i mcafee
For each result, note the service label (for example, com.mcafee.agent.ma) and run:
sudo launchctl remove com.mcafee.agent.ma
Then delete the plist files:
sudo rm -rf /Library/LaunchDaemons/com.mcafee.*
Unload and delete launch agents (per-user)
launchctl list | grep -i mcafee
rm -rf ~/Library/LaunchAgents/com.mcafee.*
Remove from Login Items
On macOS Ventura and later: open System Settings → General → Login Items & Extensions. Look for any McAfee entry under "Open at Login" and click the minus button to remove it. Also check the "Allow in Background" section for McAfee extensions and toggle them off.
Step 5: Remove McAfee System Extensions
On macOS Sonoma, Sequoia, and Tahoe, McAfee may have installed a System Extension for its firewall or on-access scanner.
- Go to System Settings → Privacy & Security → Security.
- If you see a message about a McAfee system extension being blocked or installed, click Details and revoke its permissions.
To check via Terminal:
systemextensionsctl list
If any McAfee extension is listed, it should deactivate automatically once the app is removed. If it persists, restart into Recovery Mode (hold the power button on Apple Silicon, or hold Command-R on Intel), open Terminal from Utilities, and run systemextensionsctl uninstall with the extension identifier.
Step 6: Remove Privileged Helper Tools
sudo rm -rf /Library/PrivilegedHelperTools/com.mcafee.*
Also check /Library/ScriptingAdditions/ and /Library/Extensions/ for any McAfee-named items and delete them.
Step 7: Stop McAfee Pop-Ups from Returning
If you are still seeing McAfee notification banners after completing the steps above, there are two more things to check.
Clear McAfee from Notification Center
- Open System Settings → Notifications.
- Scroll down the app list and look for McAfee or McAfee Security.
- Click it and set Allow Notifications to off.
Once the app is deleted, the entry will disappear from Notifications on its own after a restart.
Check for residual scheduled tasks
sudo find /private/var/db/com.apple.xpc.launchd/ -name "*mcafee*"
Delete any files that appear. These are XPC service records that macOS caches even after the originating app is removed.
Confirming McAfee Is Fully Gone
Run a quick sweep to make sure nothing remains:
sudo find / -iname "*mcafee*" 2>/dev/null
This searches the entire disk. On a typical Mac with SSD, it completes in a minute or two. Any results pointing to /Library, ~/Library, or /Applications are files you missed. Revisit the relevant step above to delete them.
Restart your Mac and confirm that no McAfee icon appears in the menu bar, no pop-ups appear at login, and Activity Monitor shows no McAfee processes.
A Faster Way to Find McAfee Leftovers
Hunting through ~/Library and /Library by hand is reliable but time-consuming. If you want to see all the McAfee remnants in one place before deciding what to delete, Crumb can help. Crumb scans your whole disk, surfaces launch agents, cached scanner databases, and support folders by app origin, and lets you review exactly what it found before removing anything. It runs entirely on-device and needs no account. After a McAfee uninstall, a Crumb scan often turns up several hundred megabytes of leftover scanner definitions and quarantine logs that the manual steps above can miss if you are not thorough.
Whether you go the manual route or use a tool to finish the sweep, the key is making sure both the app and its background infrastructure are gone. A half-removed McAfee installation is the main reason people keep seeing those pop-ups weeks after they thought they had deleted it.