What is tccd and why does it control app permissions?

2025-09-22 17:00

If you have seen a macOS prompt saying "App X would like to access your Photos/Contacts/Microphone", you have met tccd.

What is tccd?

The name stands for "Transparency, Consent, and Control daemon". It manages app permissions on macOS, deciding which apps can reach your camera, microphone, photos, contacts, location, and other private resources.

The .system version (tccd.system) handles system-wide permissions. The user-level tccd handles permissions for your account.

What permissions does it manage?

tccd controls access to:

Camera and microphone
Photos library
Contacts, calendars, and reminders
Location services
Files and folders (Desktop, Documents, Downloads)
Screen recording and accessibility
Full Disk Access
Automation (controlling other apps through AppleScript)
Input monitoring (keyboard watchers, keyboard shortcuts)

Where are permissions stored?

Permissions live in TCC databases:

User permissions: ~/Library/Application Support/com.apple.TCC/TCC.db
System permissions: /Library/Application Support/com.apple.TCC/TCC.db

These are SQLite databases managed by tccd. Do not edit them by hand. Use System Settings instead.

Why do I keep getting permission prompts?

macOS asks the first time an app tries to reach a protected resource. After a macOS update, some permissions may need to be granted again. If an app's code signature changes (after an update, for example), it may need fresh permission.

Can I reset permissions?

You can manage all permissions in System Settings, then Privacy and Security. To reset a single permission for an app, find the category and toggle it off then on.

For developers, you can reset all permissions for an app:

tccutil reset All com.example.appbundleid

Should you worry?

No. tccd guards your privacy. It makes sure apps cannot quietly access your camera, microphone, files, or other private data without your clear consent.

Enjoyed this post?

Well, you could share the post with others, follow me with RSS Feeds and/or send me a comment via email.