Safe Mode: The Underrated First Step in Mac Troubleshooting

6 Aug 2026

When a Mac starts freezing, running slowly or behaving unpredictably, many people jump straight to drastic solutions.

They uninstall applications, reset settings, download cleaning software or even consider reinstalling macOS.

In many cases, there is a much better first step: start the Mac in Safe Mode.

Safe Mode is one of macOS’s most useful diagnostic tools. It helps you determine whether a problem is being caused by software that loads during startup, including login items, extensions and background services. It can also help when a Mac struggles to complete a software update or start normally.

It will not repair every fault, but it can quickly narrow the investigation and prevent hours of random troubleshooting.

What Is Safe Mode?

Safe Mode is a special way of starting macOS with a reduced set of software and services.

During a normal startup, your Mac may load:

Login items
Background applications
Security software
Cloud-sync tools
Device drivers
System extensions
Fonts
Menu-bar utilities
Printer software
VPN and network filters

Safe Mode limits some of this additional software so that macOS can start in a more controlled environment.

The purpose is not to provide a permanent way of using the Mac. It is a diagnostic test.

If the problem disappears in Safe Mode, that strongly suggests something loaded during a normal startup may be involved.

Why Safe Mode Is So Useful

Mac problems often have several possible causes.

A slow Mac might be suffering from:

Faulty hardware
A nearly full drive
A damaged macOS installation
A problematic login item
Outdated security software
A browser extension
A faulty dock
A background synchronisation process

Safe Mode helps divide these possibilities into two broad groups.

If the problem continues in Safe Mode

The cause may involve:

macOS itself
Hardware
Storage
Memory
Firmware
A user account issue
A problem that Safe Mode does not disable

If the problem disappears in Safe Mode

The likely cause is something that loads only during normal startup, such as:

A login item
A third-party extension
Security software
A VPN client
A background helper
A font
A device driver
Recently installed software

This does not identify the exact culprit, but it gives you a clear direction for further testing.

What Safe Mode Actually Does

Safe Mode changes the way macOS starts.

Depending on the Mac model and version of macOS, it may:

Load only essential system components
Prevent some third-party software from launching
Disable certain login items
Restrict some system extensions
Carry out basic startup checks
Clear or rebuild some temporary caches
Reduce graphics acceleration or visual effects
Prevent some automatically loaded fonts from being used

This is why a Mac may look or feel slightly different while in Safe Mode.

Animations may be less smooth, some applications may not open and some connected devices may not work normally.

That does not necessarily indicate a new fault.

When Should You Try Safe Mode?

Safe Mode is particularly useful when a Mac:

Runs slowly immediately after login
Freezes during startup
Repeatedly crashes
Experiences kernel panics
Restarts unexpectedly
Shows a blank or blue screen during startup
Becomes unresponsive after installing software
Has problems after a macOS update
Cannot complete an update normally
Experiences high CPU usage
Has fans running constantly
Behaves normally before login but poorly afterwards
Works in one account but not another

Apple specifically recommends Safe Mode as a way to determine whether startup-loaded software is responsible for a problem. It may also help when macOS cannot update successfully through the normal Software Update process.

Safe Mode on Apple Silicon and Intel Macs

The method for entering Safe Mode depends on whether the Mac uses an Apple silicon or Intel processor.

Apple silicon includes M-series chips such as M1, M2, M3, M4 and later generations.

Older Macs generally use Intel processors.

The physical appearance of the Mac is not always enough to tell them apart, particularly during Apple’s transition between processor platforms.

How to Start an Apple Silicon Mac in Safe Mode

To enter Safe Mode on a Mac with Apple silicon:

Shut down the Mac completely.
Wait until the screen is black and the Mac has stopped making any sound.
Press and hold the power button.
Continue holding it until Loading startup options appears.
Select the startup volume, usually named Macintosh HD.
Press and hold the Shift key.
Click Continue in Safe Mode.
Release the Shift key.
Sign in when prompted.

You may be asked to sign in twice.

Apple’s current startup procedure for Apple silicon requires selecting the startup volume and holding Shift while choosing Continue in Safe Mode.

On MacBooks with Touch ID, the Touch ID button is also the power button.

How to Start an Intel Mac in Safe Mode

To enter Safe Mode on an Intel-based Mac:

Shut down or restart the Mac.
Press the power button.
Immediately press and hold the Shift key.
Continue holding Shift until the login window appears.
Sign in when prompted.

Release the key once the login screen is visible.

Apple lists Shift as the Intel startup key for Safe Mode.

Wireless keyboards may not always connect early enough during startup. If the shortcut does not work, try a wired keyboard where possible.

How Do You Know Safe Mode Is Active?

After signing in, you may see Safe Boot displayed in the menu bar or login screen.

You can also confirm it through System Information:

Hold the Option key.
Open the Apple menu.
Select System Information.
Select Software.
Look for Boot Mode.

It should report Safe rather than Normal.

Do not rely only on visual differences, because Safe Mode may look almost identical to a normal desktop.

What Should You Do Once Safe Mode Starts?

Do not simply start the Mac in Safe Mode and immediately restart it.

Use the opportunity to test the original problem.

For example:

Open the application that was freezing
Browse the web
Connect to the network
Open several documents
Check whether the Mac still overheats
Leave it running for a reasonable period
Try the task that normally triggers the crash
Attempt the macOS update again
Check whether performance is improved

The test should match the original symptom as closely as possible.

If the Mac normally freezes after 20 minutes, using Safe Mode for only two minutes tells you very little.

If the Mac Works Normally in Safe Mode

This is an important clue.

It suggests that the core operating system and hardware may be functioning, while something added to the normal startup process could be causing the fault.

Your next steps should focus on recent software changes and automatically loaded items.

Review Login Items

Go to:

System Settings > General > Login Items & Extensions

Review the applications listed under:

Open at Login
Allow in the Background
Extensions

Disable unnecessary items one at a time.

Do not turn everything off at once.

A gradual approach makes it easier to determine which change solved the problem.

On a business Mac, be careful not to disable:

Endpoint protection
Backup software
Device-management agents
Required VPN services
Cloud-storage tools
Remote support software

Check with your IT provider before changing unfamiliar business applications.

Investigate Recently Installed Software

Think about what changed immediately before the problem began.

Common triggers include:

Antivirus software
VPN applications
Printer drivers
Docking-station utilities
Display-management software
Audio drivers
Cloud-sync applications
Menu-bar tools
Browser extensions
Virtualisation software
macOS updates

Update the suspected application first.

When no compatible update is available, uninstall it using the developer’s official removal procedure and test again.

Simply dragging the main application to the Bin may leave background helpers and extensions behind.

Review Extensions

Modern applications may install system, network, driver or endpoint-security extensions.

These can interact closely with macOS and sometimes cause:

Slow startup
Network failures
Kernel panics
High CPU usage
Sleep and wake problems
Application crashes

Review extensions under:

System Settings > General > Login Items & Extensions

Do not disable an extension merely because you do not recognise its name.

First determine which application installed it.

Check Browser Extensions

Safe Mode may stop or limit some background components, but browser extensions should also be investigated separately.

A problematic extension can cause:

High processor usage
Slow browsing
Unexpected advertising
Browser crashes
Excessive memory use
Page-loading failures

Disable unused extensions and reopen the browser.

Test with one browser window and a small number of tabs.

Restart Normally

To leave Safe Mode, restart the Mac normally without holding any keys.

Apple recommends restarting normally after a successful Safe Mode startup. If the problem returns, review login items and other startup-loaded software.

After restarting, check whether the original symptom is still present.

In some situations, simply entering Safe Mode and restarting can appear to resolve the problem because temporary caches or startup checks have been refreshed.

Continue monitoring the Mac rather than assuming the issue is permanently fixed.

If the Problem Returns After Normal Restart

When a Mac works in Safe Mode but fails again after a normal restart, use a process of elimination.

A practical method is:

Disable one or two non-essential login items.
Restart normally.
Reproduce the problem.
Record the result.
Repeat with the next item.

This may take longer than switching everything off, but it identifies the actual cause.

Once the culprit is found, update, reconfigure or remove it.

If the Problem Continues in Safe Mode

Safe Mode is not a complete hardware diagnostic.

If the Mac remains unstable, the problem may involve:

Failing storage
Faulty memory
Logic-board components
Battery or power issues
macOS corruption
Firmware
Overheating
A connected device
A user account
An application that still runs in Safe Mode

At this point, broader troubleshooting is required.

Disconnect External Devices

Before concluding that the Mac itself has failed, disconnect unnecessary accessories.

Remove:

USB hubs
Docks
External displays
Storage drives
Printers
Audio interfaces
Card readers
Ethernet adapters
Webcams
Non-essential chargers and cables

Restart in Safe Mode again and test.

A faulty peripheral, cable or dock can cause crashes even when third-party startup software is restricted.

Test Another User Account

A problem that affects only one macOS account may involve account-specific settings, login items or preferences.

Create or use another user account and repeat the test.

If the Mac works correctly in the second account, the cause may be located within the original user profile rather than the system as a whole.

Avoid immediately deleting the original account, particularly when it contains important files.

Check Available Storage

A nearly full startup drive can cause slow performance, failed updates and unpredictable behaviour.

Go to:

System Settings > General > Storage

Aim to maintain a reasonable amount of free space for:

Updates
Temporary files
Virtual memory
Application caches
Cloud synchronisation
Normal system operation

As a practical guide, keeping roughly 10% to 20% of the drive available can help macOS operate efficiently.

Do not delete unfamiliar files from the System or Library folders.

Run Disk Utility First Aid

If Safe Mode does not resolve the issue, check the startup disk.

Open Disk Utility and select:

View > Show All Devices

Then run First Aid on the relevant volumes.

For a more complete check, start the Mac in macOS Recovery and run Disk Utility from there.

If the internal storage is missing or First Aid repeatedly reports unrepairable errors, protect the data and seek professional support.

Run Apple Diagnostics

Apple Diagnostics can test for certain hardware problems.

On Apple silicon Macs, shut down the device, hold the power button until startup options appear and then press Command + D.

On Intel Macs, start the Mac while holding D. Apple also documents Option + D as an alternative on supported Intel systems.

Record any reference codes displayed.

A clean diagnostic result does not prove that every component is healthy, particularly when a fault is intermittent.

Safe Mode and Kernel Panics

Kernel panics are system-level crashes that force the entire Mac to restart.

Safe Mode is useful because it can help determine whether a third-party extension or startup-loaded application is involved.

If kernel panics stop in Safe Mode, investigate:

Security software
VPN clients
Virtualisation tools
Audio drivers
Docking software
Storage drivers
Display utilities
Recently installed extensions

If the Mac continues to panic in Safe Mode, hardware, firmware or core macOS issues become more likely.

Save copies of the panic reports before making major changes.

Safe Mode and Failed macOS Updates

Safe Mode can sometimes help when an update will not download, prepare or install correctly.

Starting in Safe Mode reduces interference from some background software and services. Apple notes that Safe Mode may help when updating through Software Update or the App Store produces an error.

Before retrying:

Connect the Mac to reliable power
Confirm sufficient storage is available
Use a stable internet connection
Disconnect unnecessary accessories
Back up important data

If the update continues to fail, macOS Recovery may be required.

Safe Mode and Slow Performance

A Mac that becomes responsive in Safe Mode may be overloaded by normal-startup software.

Likely causes include:

Too many login items
Several cloud-sync applications
Duplicate antivirus products
Outdated menu-bar utilities
Browser extensions
Printer or scanner software
Background update agents
Old drivers

Use Activity Monitor during a normal startup to identify processes consuming CPU, memory, disk or network resources.

Do not assume that every background process is unnecessary. Business security and backup tools may be essential even when they use some resources.

What Safe Mode Does Not Do

Safe Mode is diagnostic, not magical.

It does not:

Remove malware automatically
Repair every storage fault
Replace a backup
Fix damaged hardware
Upgrade an unsupported Mac
Recover deleted data
Repair a swollen battery
Permanently disable startup software
Guarantee that macOS is healthy

It is valuable because it helps narrow the cause, not because it provides a universal fix.

Common Safe Mode Mistakes

Releasing the Key Too Soon

On an Intel Mac, hold Shift until the login window appears.

On Apple silicon, hold Shift while selecting Continue in Safe Mode.

Using the Wrong Instructions

Apple silicon and Intel Macs use different startup procedures.

A key combination intended for Intel will not produce the same result on Apple silicon.

Testing for Too Little Time

Use Safe Mode long enough to reproduce the original issue.

Disabling Everything at Once

This removes useful evidence and may interfere with important business protections.

Assuming the Problem Is Fixed

A temporary improvement is not always a permanent repair.

Restart normally and monitor the Mac.

Force-Quitting System Processes

Do not use Activity Monitor to terminate unfamiliar macOS processes randomly.

When to Stop Troubleshooting

Seek professional help when:

The Mac cannot enter Safe Mode
It repeatedly restarts during startup
Kernel panics continue in Safe Mode
The internal storage is not detected
Disk Utility reports serious errors
Apple Diagnostics reports a fault
The Mac has suffered liquid or impact damage
The battery is swollen
The Mac becomes dangerously hot
Important data has no current backup
The issue affects multiple business devices

Continuing to experiment on a Mac with failing storage or important unprotected data can make recovery more difficult.

A Practical Safe Mode Checklist

When a Mac is misbehaving:

Record the symptoms.
Disconnect unnecessary accessories.
Start in Safe Mode.
Confirm that Safe Mode is active.
Reproduce the original task.
Note whether the problem continues.
Restart normally.
Review login items and extensions.
Update or remove suspected software.
Test one change at a time.
Check storage and backups.
Escalate if the fault continues.

Safe Mode for Business Macs

Safe Mode is useful in business environments because it helps technicians separate hardware and operating-system problems from third-party software conflicts.

However, business Macs often run important background systems such as:

Endpoint detection and response
Backup agents
Device-management software
Remote-support tools
Network filters
Cloud synchronisation
Compliance monitoring

Disabling these tools without approval can create security and compliance risks.

A managed troubleshooting process should document every change and confirm that required protections are restored afterwards.

How Hamilton Group Can Help

Safe Mode is often the fastest way to establish whether a Mac problem is being caused by startup software, extensions or a deeper system fault.

Hamilton Group can help businesses diagnose slow Macs, failed updates, repeated crashes and other macOS problems without relying on guesswork.

Our team can assist with:

Apple silicon and Intel Mac troubleshooting
Safe Mode testing
Login-item and extension audits
Kernel panic investigations
macOS update problems
High CPU and memory usage
Backup verification
Hardware diagnostics
Mac device management
Mixed Apple and Windows environments

We can also help prevent recurring issues by standardising software, monitoring device health and centrally managing business Macs.

To arrange Mac support or discuss proactive device management, call Hamilton Group on 0330 043 0069 or visit hgmssp.com.