Create and Manage User Accounts on Mac (Complete Guide)

Whether you're sharing your Mac with family members, setting up accounts for children with parental controls, or managing a work computer with separate admin and standard users, macOS provides comprehensive user account management. Multiple user accounts keep everyone's files, settings, and data completely separate while allowing convenient sharing of a single Mac.

This complete guide covers everything about creating, configuring, and managing user accounts on macOS, from basic setup to advanced multi-user features and parental controls.

Understanding macOS User Accounts

Why Use Multiple User Accounts

Personal separation:

• Each user has their own desktop, documents, and settings
• Private files not visible to other users
• Independent email, messages, and app configurations
• Personal preferences for display, keyboard, apps

Security benefits:

• Standard accounts can't make system-wide changes
• Malware affecting one account doesn't spread to others
• Administrative tasks require authentication
• Accidental system modifications prevented

Family sharing:

• Parents and children each have appropriate access levels
• Parental controls limit content and usage
• Shared purchases and subscriptions through Family Sharing
• Screen time management for kids

Work and personal separation:

• Different accounts for work vs. personal use
• Separate browser profiles, files, and email
• Work account can be managed by employer
• Personal privacy maintained

Types of User Accounts

Administrator:

• Full system access and control
• Can install apps, modify settings, create/delete users
• Required for system updates and configuration
• Should be used carefully (power comes with responsibility)

Standard:

• Can use apps and modify own files
• Cannot install system-wide software
• Cannot modify other users' files
• Cannot change security settings
• Best for daily use, children, and guests

Managed with Parental Controls:

• Standard account with additional restrictions
• Time limits and app restrictions
• Content filtering
• Activity monitoring
• Ideal for children

Sharing Only:

• Can access shared files remotely
• Cannot log in to Mac directly
• For file sharing with family or colleagues
• Limited use case

Guest User:

• Temporary account for visitors
• All data deleted when guest logs out
• No password required
• Limited access to Mac

Group:

• Not a login account
• Organizes users for shared permissions
• Advanced file sharing scenarios

Creating User Accounts

Prerequisites

Requirements to create accounts:

• Administrator access to the Mac
• Admin password
• Information about new user (name, account name)
• Optional: Apple ID for new user

Creating a New User Account

Step-by-step process:

1. Open System Settings
2. Click Users & Groups in sidebar
3. You may need to click 🔒 (lock icon) and enter admin password
4. Click Add Account... (or + button)
5. Choose account type from dropdown:
   • Administrator
   • Standard
   • Managed (with parental controls)
   • Sharing Only
   • Group
6. Fill in account information:
   • Full Name: Display name (e.g., "John Smith")
   • Account Name: Short username, lowercase, no spaces (e.g., "johnsmith")
   • Password: Set strong password for account
   • Verify: Re-enter password
   • Password Hint: Optional reminder (appears after failed login attempts)
7. Click Create User
8. New account appears in user list

Account name considerations:

• Cannot be changed later without creating new account
• Use lowercase letters
• No spaces (use underscore if needed: john_smith)
• Keep it short but recognizable
• Becomes part of home folder path: /Users/accountname

Setting Up Administrator Accounts

When to create admin accounts:

• Initial Mac setup (first account is always admin)
• Additional family member who manages the Mac
• IT administrator for corporate Mac
• Generally: Limit to 1-2 admin accounts

Admin account best practices:

1. Don't use admin account for daily work

   • Create standard account for yourself
   • Use admin only for system tasks
   • Reduces malware risk and accidental changes

2. Secure admin password

   • Strong, unique password
   • Different from standard account password
   • Store securely (password manager)

3. Enable FileVault

   • Full-disk encryption
   • Protects all user accounts
   • Configure during account setup or later

Setting Up Standard Accounts

Recommended for:

• Daily use accounts
• Family members without admin needs
• Children (combine with parental controls)
• Guest workers or temporary users

Create standard account:

1. Follow account creation process above
2. Select Standard from account type dropdown
3. Complete remaining fields
4. Standard users can:
   • Install apps in their account only
   • Modify their own files and settings
   • Use all installed applications
   • Access internet and shared resources

Standard users cannot:

• Install system-wide applications
• Modify security settings
• Create or delete other users
• Change system preferences affecting all users
• Access other users' files (unless explicitly shared)

Converting Between Account Types

Change account type:

1. Go to System Settings > Users & Groups
2. Unlock settings (admin password required)
3. Select user account to modify
4. Click Account Type dropdown (or similar option)
5. Choose new type:
   • Administrator
   • Standard
   • Managed with Parental Controls
6. Click to confirm change

Important notes:

• At least one admin account must exist
• Cannot demote the only admin to standard
• Changing to/from admin requires restart to fully apply
• User's files and settings remain unchanged

Managing Existing User Accounts

User Account Settings

Access user settings:

1. Go to System Settings > Users & Groups
2. Unlock with admin password
3. Select user from list
4. View and modify settings

Available settings per user:

Full Name:

• Display name shown in login window and menus
• Can be changed anytime
• Doesn't affect account name or file paths

Apple ID:

• Link Apple ID to account
• Enables iCloud, App Store, continuity features
• Click to add or modify

Password:

• Click Change Password
• Requires current password (or admin authentication)
• Update password hint

Login Items:

• Apps that launch automatically when user logs in
• Manage in Login Items section
• Remove unnecessary items to speed up login

Allow user to:

• Checkboxes for specific permissions
• Varies by account type
• Example: "Reset password using Apple ID"

Deleting User Accounts

When to delete accounts:

• User no longer needs access
• Cleaning up old accounts
• Freeing up disk space
• Before selling or transferring Mac

Delete account process:

1. Open System Settings > Users & Groups
2. Unlock with admin password
3. Select user to delete
4. Click − (minus button) or Delete Account
5. Choose what to do with user's files:
   • Save the home folder in a disk image: Preserves all data in compressed archive
   • Don't change the home folder: Keeps folder but removes account (advanced)
   • Delete the home folder: Permanently removes all user data
6. Click Delete User to confirm

Important warnings:

• Cannot be undone (except from Time Machine backup)
• Saves option preserves data but in non-accessible format unless restored
• Delete option permanently erases all user files
• Cannot delete currently logged-in account
• Cannot delete the only admin account

Before deleting:

1. Back up important files from user's home folder
2. Transfer needed data to another account or external drive
3. Verify user is logged out
4. Ensure another admin exists if deleting admin account

Managing Login Password

Change your own password:

1. Open System Settings > Touch ID & Password
2. Click Change Password
3. Enter current password
4. Enter new password (twice)
5. Update password hint
6. Click Change Password

Admin changes another user's password:

1. Go to System Settings > Users & Groups
2. Select the user
3. Click Reset Password or Change Password
4. Enter new password (may not need to know current password)
5. Provide new hint
6. Confirm changes

Password reset options:

• Reset using Apple ID: User can reset their own password if enabled
• Admin reset: Administrator can reset any user's password
• Recovery mode: Last resort for forgotten admin passwords
• FileVault recovery key: Required if FileVault enabled and password forgotten

Profile Picture

Change user picture:

1. In Users & Groups, select account
2. Click current profile picture
3. Choose source:
   • Camera: Take photo with Mac's camera
   • Photos: Select from Photos library
   • Memoji: Create or choose Memoji (if supported)
   • Monogram: Text-based avatar with initials
   • Suggestions: Pre-designed avatars
4. Adjust photo if needed (crop, position)
5. Click Save or Choose

Picture usage:

• Login screen
• User menu in menu bar
• Contact card
• Messages and FaceTime

Parental Controls

Setting Up Parental Controls

Parental controls provide comprehensive restrictions for children's accounts.

Enable parental controls:

1. Create or select a Standard account for the child
2. Go to System Settings > Screen Time
3. Select the child's account from sidebar (or click Add if using Family Sharing)
4. Click Turn On
5. Configure restrictions (detailed below)

Alternative: Family Sharing approach:

1. Set up Family Sharing with your Apple ID
2. Create Apple ID for child (if under 13, must create through Family Sharing)
3. Child's account automatically supports Screen Time
4. Manage from parent's device or iCloud.com

Screen Time and App Limits

Set app time limits:

1. In Screen Time settings
2. Click App Limits
3. Click + to add limit
4. Select categories or specific apps
5. Set daily time allowance
6. Configure schedule (every day or specific days)
7. Options:
   • Block at end of limit
   • Notify when limit reached
   • Allow more time with approval

Downtime:

Schedules when only allowed apps are available:

1. Click Downtime in Screen Time
2. Enable Downtime
3. Set schedule (e.g., 9 PM to 7 AM on school nights)
4. Choose:
   • Every Day
   • Custom schedule per day
5. During downtime:
   • Most apps blocked
   • Only allowed apps accessible (configure in Always Allowed)

Always Allowed apps:

Apps available even during downtime:

1. Click Always Allowed
2. Add essential apps:
   • Phone (if applicable)
   • Messages
   • FaceTime
   • Educational apps
3. Remove non-essential apps from list

Communication Limits

Manage who child can communicate with:

1. In Screen Time, click Communication
2. Set options:
   • During Screen Time: Who can contact during allowed time
   • During Downtime: Who can contact during downtime (more restrictive)
3. Options:
   • Everyone: No restrictions
   • Contacts Only: Only people in Contacts app
   • Specific Contacts: Choose allowed contacts

Communication Safety:

1. Enable Check for Sensitive Photos
2. Child receives warning if sending/receiving sensitive images
3. Option to notify parent (for younger children)
4. Privacy-preserving (Apple doesn't see images)

Content Restrictions

Apps and features:

1. In Screen Time, click Content & Privacy
2. Enable Content & Privacy Restrictions
3. Configure Apps section:
   • Allow or block: Camera, FaceTime, Mail, Safari, etc.
   • Prevent child from using specific built-in apps

Content restrictions:

Set age-appropriate limits:

1. Under Content Restrictions:
   • Music, Podcasts, News, Fitness: Explicit content filter
   • Books: Explicit content filter
   • Apps: Age rating limit (4+, 9+, 12+, 17+)
   • Movies: Film rating limit (G, PG, PG-13, R, NC-17)
   • TV Shows: TV rating limit (TV-Y, TV-Y7, TV-G, TV-PG, TV-14, TV-MA)

Web content:

1. Under Content & Privacy > Web Content
2. Options:
   • Unrestricted Access: No filtering
   • Limit Adult Websites: Automatic filter, can customize allowed/blocked sites
   • Allowed Websites Only: Whitelist approach, maximum restriction
3. Add specific allowed or blocked sites

Store Purchases and Privacy

Prevent unauthorized purchases:

1. In Content & Privacy > Store Purchases
2. Set restrictions:
   • App Downloads: Don't Allow, Ask, or Allow
   • In-App Purchases: Don't Allow or Allow
   • Require Password: Always, 15 minutes
3. Prevents surprise charges

Privacy settings:

Control access to data:

1. Location Services: Allow Changes or Don't Allow Changes
2. Contacts, Photos, etc.: Prevent apps from requesting access
3. Advertising: Limit ad tracking
4. Account Changes: Prevent modifying account settings

Monitoring and Reports

Activity reports:

View child's device usage:

1. In Screen Time for child's account
2. See usage statistics:
   • Most Used apps
   • Categories of use
   • Number of pickups
   • Notifications received
3. Review daily and weekly trends

Screen Time passcode:

Prevent child from changing restrictions:

1. Use Screen Time Passcode (separate from device password)
2. Required to modify Screen Time settings
3. Request more time from parent
4. Don't forget this passcode (difficult to recover)

Fast User Switching

Enable Fast User Switching

Switch between accounts without logging out:

Enable in settings:

1. Go to System Settings > Users & Groups
2. Click Login Options (unlock with admin password if needed)
3. Find Show fast user switching menu as dropdown
4. Choose:
   • Full Name: Shows user's name in menu bar
   • Short Name: Shows account name
   • Icon: Shows user icon only
   • Off: Disable fast user switching

Access fast user switching:

• Click user name/icon in menu bar
• Select different user from list
• Enter password (or use Touch ID if configured)
• Switch to that user's session

How Fast User Switching Works

Multiple active sessions:

• All user sessions remain active simultaneously
• Apps continue running in background sessions
• Can switch between users without closing apps
• Each user maintains independent environment

Limitations:

• Uses significant RAM (all sessions in memory)
• Some apps may not work in background
• Increased battery drain on laptops
• Shared resources (printers, drives) accessible to all

Best practices:

• Log out when truly finished (frees memory)
• Use for temporary switches between users
• Monitor resource usage with Activity Monitor
• Consider RAM upgrade if frequently using multiple sessions

Login Options and Security

Automatic Login

Configure automatic login:

1. Go to System Settings > Users & Groups
2. Click Login Options
3. Set Automatic login dropdown
4. Choose:
   • Off: Require login selection and password
   • [Username]: Automatically log in to specific account

Security considerations:

• Disable for multi-user Macs: Others can access auto-login account
• Required off for FileVault: Full-disk encryption incompatible with auto-login
• Disable for laptops: Risk if lost or stolen
• Acceptable for single-user desktop in secure location

Login Window Options

Display as:

1. In Login Options
2. Choose Display login window as:
   • List of users: Shows all account names and pictures (convenient)
   • Name and password: Must type username and password (more secure)

Security impact:

• List of users: Convenient but reveals account names (easier for attackers)
• Name and password: More secure, usernames not visible
• Recommendation: Name and password for business/sensitive environments

Additional options:

• Show password hints: After three failed attempts
• Show Sleep, Restart, and Shut Down buttons: Allow without logging in
• Accessibility Options: Available from login screen

FileVault and Multiple Users

Enable FileVault with multiple users:

1. Go to System Settings > Privacy & Security
2. Scroll to FileVault
3. Click Turn On
4. All users must be enabled for FileVault unlock
5. Each user who should unlock Mac must be granted access
6. Users not enabled cannot unlock at startup (can still log in after another user unlocks)

FileVault user management:

After enabling FileVault:

1. In Privacy & Security > FileVault
2. Click Enable Users (if available)
3. Select which users can unlock encrypted drive
4. Each user must enter their password to enable
5. Requires restart to apply

Important notes:

• Users added after FileVault enabled must be explicitly granted unlock ability
• Admin can enable other users without their password
• At least one user must be able to unlock, or data is inaccessible
• Keep FileVault recovery key secure

Sharing and Permissions

File Sharing Between Users

Public folder sharing:

Each user has a Public folder others can access:

• Location: /Users/[username]/Public/
• Other users can read files placed here
• Drop Box subfolder: Others can write files (but not read)

Explicit file sharing:

1. Right-click file or folder
2. Choose Get Info
3. Expand Sharing & Permissions section
4. Click + to add users
5. Choose user
6. Set permission:
   • Read & Write
   • Read only
   • Write only (Drop Box)
   • No Access
7. Click lock to prevent further changes

Shared folders:

1. Create folder to share
2. Set permissions as above
3. Add to Sidebar for easy access
4. All permitted users can access

Network Sharing

Enable file sharing:

1. Go to System Settings > General > Sharing
2. Enable File Sharing
3. Click Info button next to File Sharing
4. Configure:
   • Shared Folders: Add folders to share over network
   • Users: Specify who can access remotely
   • Set permissions per user

Remote login:

Allow SSH access:

1. In Sharing settings
2. Enable Remote Login
3. Choose:
   • All users
   • Only these users (select specific accounts)
4. Connect via Terminal: ssh username@ip-address

Guest User Account

Enable Guest User

Set up guest account:

1. Go to System Settings > Users & Groups
2. Click Guest User in sidebar (or enable if not shown)
3. Toggle Allow guests to log in to this computer
4. Configure options:
   • Allow guests to connect to shared folders
   • Enable parental controls for guest

How guest account works:

• No password required
• Temporary session
• All data deleted when guest logs out
• No access to other users' files
• Fresh desktop and settings each time
• Can browse web, use apps, but changes don't persist

Guest user restrictions:

Cannot:

• Install software
• Modify system settings
• Create permanent files (all deleted on logout)
• Access other users' data

Use cases:

• Visitors need temporary Mac access
• Public computer scenarios
• Testing configurations (fresh environment each login)
• Children's friends (no persistent data)

Guest User and Security

Security benefits:

• No permanent data stored
• No password to compromise
• Can't modify system
• Isolated from other accounts

Security risks:

• Anyone can access Mac (no authentication)
• Could be used to access network resources
• Disable if Mac is in unsecured location

Best practice:

• Enable only when needed
• Disable when not in use
• Use Parental Controls to limit guest capabilities
• Monitor guest usage in multi-user environments

Troubleshooting User Accounts

Login Issues

Can't log in to account:

1. Verify password:

   • Check Caps Lock
   • Check keyboard layout
   • Try password hint (after 3 attempts)

2. Reset password:

   • Use Apple ID reset (if enabled)
   • Admin can reset from another account
   • Boot to Recovery Mode and use resetpassword utility

Account not appearing at login:

• Check if hidden from login window
• Admin may have disabled account
• Corruption in user database (rare, requires advanced troubleshooting)

User Folder Issues

Permissions problems:

If user can't access their own files:

1. Boot to Recovery Mode (Command + R at startup)
2. Choose Utilities > Terminal
3. Run: resetpassword (opens password reset utility)
4. Select user
5. Click "Reset Home Folder Permissions and ACLs"
6. Restart and test

Home folder in wrong location:

• Usually in /Users/[accountname]/
• If moved or deleted, create new account
• Restore files from backup

Fast User Switching Problems

Mac slow with multiple users logged in:

• Too many active sessions for available RAM
• Log out unused accounts
• Close apps in background sessions
• Consider RAM upgrade

Apps not working in background session:

• Some apps don't support background mode
• Audio apps may conflict across sessions
• Network apps may have port conflicts
• Use separate apps or log out other users

Parental Controls Not Working

Restrictions not applying:

1. Verify Screen Time is enabled for account
2. Check that account is Standard, not Admin
3. Confirm Screen Time passcode is set
4. Restart Mac
5. Update macOS to latest version

Child bypassing restrictions:

• Ensure child doesn't have admin password
• Set Screen Time passcode (different from device password)
• Enable "Share Across Devices" to sync restrictions
• Regularly review Screen Time settings

Apps not blocked:

• Some apps may not support Screen Time restrictions
• Update apps to latest versions
• Contact developer if app ignores parental controls
• Block app entirely if it won't respect limits

Advanced User Management

Creating Sharing Only Users

For file sharing without login access:

1. Create new user
2. Choose Sharing Only type
3. Set password
4. Use in File Sharing settings
5. User can access shared folders remotely
6. Cannot log in to Mac locally

Use cases:

• Network file access for family members
• Shared project folders
• Media server access
• Collaborate without full Mac access

Group Management

Create groups:

1. In Users & Groups
2. Click Add Account → Group
3. Name the group
4. Add users to group
5. Use for folder permissions (assign permission to group, not individuals)

Benefits:

• Simpler permission management
• Change access for multiple users at once
• Common in business environments
• Useful for family shared folders

Managed Accounts (Enterprise)

Mobile accounts:

• Cached network credentials
• Log in even when offline
• Syncs with server when connected
• Requires macOS Server or Active Directory

Configuration profiles:

• Managed by MDM (Mobile Device Management)
• Enforces policies remotely
• Restricts certain settings
• Used by schools and businesses

Check if Mac is managed:

1. Go to System Settings
2. Look for Profiles in sidebar
3. View installed configuration profiles
4. Contact IT to modify managed settings

Best Practices

Security Recommendations

Account strategy:

1. Create standard account for daily use

   • Even if you're the only user
   • Use admin account only for system tasks
   • Reduces malware and accident risk

2. Use strong, unique passwords

   • Different password per account
   • Store in password manager
   • Enable FileVault

3. Limit admin accounts

   • One or two maximum
   • Secure admin passwords carefully
   • Don't share admin credentials

4. Enable parental controls proactively

   • Even before problems arise
   • Teach healthy device use
   • Monitor without being invasive

Family Sharing Strategy

Organize accounts:

• Parent 1: Admin account
• Parent 2: Admin or Standard
• Children: Standard with Parental Controls
• Guest: Enabled for visitors

Use Family Sharing:

• Shared App Store purchases
• One shared iCloud+ plan
• Shared calendars and reminders
• Location sharing for safety

Regular reviews:

• Monthly: Check Screen Time reports
• Quarterly: Review parental controls as child matures
• Annually: Evaluate if account types still appropriate

Maintenance Tasks

Regular maintenance:

1. Update all accounts:

   • Keep passwords current
   • Update user information
   • Remove old login items

2. Clean up unused accounts:

   • Delete accounts no longer needed
   • Archive data before deleting
   • Free up disk space

3. Review permissions:

   • Check shared folder access
   • Verify only necessary users have access
   • Audit admin accounts

4. Monitor disk space:

   • Large user folders consume storage
   • Use Storage Management to analyze
   • Consider archiving old data

Conclusion

Effective user account management on macOS enables secure sharing of a Mac among family members or colleagues while maintaining privacy and appropriate access levels. Whether setting up parental controls for children, creating separate work and personal accounts, or managing a shared family computer, macOS provides flexible and powerful tools.

Key takeaways:

1. Use appropriate account types: Admin for management, Standard for daily use, Parental Controls for children
2. Configure security properly: Strong passwords, FileVault, Touch ID where supported
3. Leverage parental controls: Comprehensive restrictions for age-appropriate Mac use
4. Implement fast user switching: Convenient multi-user access on shared Mac
5. Regular maintenance: Review accounts, permissions, and restrictions periodically

Recommended setup for family Mac:

• Primary parent: Administrator account
• Secondary parent: Standard account (or Administrator if needed)
• Children: Standard accounts with Screen Time restrictions
• Guest: Enabled for visitors
• FileVault: Enabled for full-disk encryption
• Fast User Switching: Enabled for convenience

By properly configuring user accounts and regularly reviewing access and restrictions, you create a Mac environment that's secure, private, and appropriate for all users while enabling easy sharing of hardware resources.