Using Activity Monitor Like A Pro:Find Out What’s Eating Your CPU

When a Mac starts running slowly, the first instinct is often to restart it and hope for the best.

Sometimes that works. But when the problem keeps returning, you need a clearer answer.

Is one application using too much processor power? Is a browser tab misbehaving? Is a background process stuck? Is the Mac syncing files, indexing data or running a security scan?

Activity Monitor can help you find out.

Built into macOS, Activity Monitor shows which applications and processes are using your Mac’s processor, memory, energy, storage and network connection. Used correctly, it can help you identify performance problems without installing any third-party “cleaner” software.

This guide explains how to use Activity Monitor like a professional, with a particular focus on finding out what is eating your CPU.

What Is Activity Monitor?

Activity Monitor is macOS’s built-in system monitoring tool.

It provides a live view of what is happening behind the scenes on your Mac.

You can use it to review:

• CPU usage
• Memory consumption
• Energy impact
• Disk activity
• Network traffic
• Running applications
• Background processes
• Unresponsive software

Think of Activity Monitor as a dashboard for your Mac’s internal workload.

It does not automatically fix problems, but it gives you the information needed to investigate them properly.

How to Open Activity Monitor

There are several ways to open it.

The quickest method is to use Spotlight:

1. Press Command + Space
2. Type Activity Monitor
3. Press Return

You can also find it in:

Applications > Utilities > Activity Monitor

Once open, you will see a list of applications and processes, along with several tabs at the top.

These normally include:

• CPU
• Memory
• Energy
• Disk
• Network

For performance problems, the CPU and Memory tabs are usually the best places to begin.

What Does CPU Mean?

CPU stands for central processing unit.

It is the part of the Mac responsible for carrying out calculations and instructions.

Every application uses some CPU power. Opening a website, joining a video call, exporting a video, installing an update and synchronising files all require processor activity.

High CPU usage is not automatically a problem.

For example, it is normal for CPU usage to increase while:

• Exporting video
• Rendering graphics
• Installing macOS updates
• Compressing files
• Running a backup
• Scanning for malware
• Joining a video meeting
• Opening a large application

The concern is sustained high CPU usage when the Mac should be relatively idle, particularly when the device becomes hot, noisy or unresponsive.

Start With the CPU Tab

Open Activity Monitor and select CPU.

The list shows the processes currently running and how much processing power they are using.

Important columns include:

• Process Name
• % CPU
• CPU Time
• Threads
• Idle Wake Ups
• Kind
• User

The most useful column for initial troubleshooting is % CPU.

Click the % CPU heading to sort the list from highest to lowest usage.

This immediately shows which processes are using the most processor power.

Understanding the % CPU Figure

The percentage can be confusing because it may exceed 100%.

This does not necessarily mean something is wrong.

Modern Macs have multiple processor cores. A process using 100% may be fully using one core, while a process using 300% may be heavily using several cores.

The exact interpretation depends on the Mac’s processor and the number of available cores.

What matters most is the pattern.

Ask:

• Is the process consistently near the top?
• Does usage fall after a few seconds?
• Does it remain high for several minutes?
• Does the Mac become slow at the same time?
• Does the process belong to an application you recognise?
• Does the problem return every time the application opens?

A short spike is normal. Sustained high usage deserves investigation.

Common Applications That Use High CPU

Some applications are more likely than others to appear near the top of the list.

Web Browsers

Chrome, Safari, Edge and Firefox can use significant CPU, especially when several tabs are open.

Common causes include:

• Video streaming
• Browser-based meetings
• Poorly designed websites
• Advertising scripts
• Web applications
• Too many extensions
• Dozens of open tabs
• A single frozen tab

Browsers often separate each tab and extension into its own process.

This means you may see entries such as browser helpers, renderers or GPU processes rather than one simple browser entry.

Try closing tabs one at a time and watching Activity Monitor to see whether CPU usage falls.

Microsoft Teams and Other Meeting Software

Video-conferencing applications can use substantial processor power because they manage:

• Camera processing
• Microphone input
• Background effects
• Screen sharing
• Noise suppression
• Video encoding
• Incoming video streams

High CPU use during a meeting may be normal.

However, if Teams or another meeting application continues consuming resources after the meeting ends, quit it completely and reopen it.

Adobe Creative Applications

Photoshop, Premiere Pro, After Effects and other creative tools may use high CPU during demanding tasks.

This is expected while exporting, rendering or processing large files.

Unexpected high usage while the application is idle could suggest:

• A stuck background task
• A damaged plug-in
• A large file still processing
• An update issue
• A cache problem

Cloud-Sync Applications

OneDrive, Dropbox, Google Drive and similar tools may use CPU while synchronising files.

This can be particularly noticeable after:

• A new account is configured
• Thousands of files are added
• The Mac has been offline
• A large folder is changed
• Files are moved between locations
• The application is rebuilding its database

Allow the sync to finish before assuming there is a fault.

Antivirus and Security Software

Endpoint protection may use CPU during scans, updates or file analysis.

Short periods of higher usage are normal.

Constant high usage may indicate:

• A scan that is stuck
• Two security products conflicting
• A damaged installation
• A very large or problematic file
• An update issue
• Incorrect exclusions

Business users should not disable security software without consulting their IT provider.

What Is kernel_task?

One process that often causes confusion is kernel_task.

It is a core macOS process that helps manage low-level system functions, including processor and thermal behaviour.

Seeing kernel_task near the top of Activity Monitor does not always mean it is the cause of the problem.

In some situations, macOS deliberately increases kernel_task activity to limit how much processor time other applications can use. This can help protect the Mac when temperatures are too high.

High kernel_task usage may therefore indicate:

• Overheating
• Blocked ventilation
• A faulty sensor
• Heavy processor activity
• Charging-related heat
• A problematic external device
• Hardware or software issues

Do not force-quit kernel_task.

Instead, investigate what is making the Mac hot or unstable.

Check whether:

• The fans are running loudly
• The Mac feels unusually hot
• Vents are blocked
• The MacBook is being used on a soft surface
• Several demanding applications are running
• An external monitor or dock is connected
• The issue disappears after a restart

What Is WindowServer?

WindowServer is another important macOS process.

It helps draw and manage everything displayed on the screen, including windows, animations, transparency and external displays.

WindowServer may use more CPU when:

• Many windows are open
• Several Spaces are in use
• Multiple displays are connected
• A high-resolution external display is active
• Screen recording is running
• Video is playing
• Desktop widgets are active
• Applications are constantly redrawing their windows

Higher usage is not always a fault.

However, if WindowServer is consuming excessive CPU, try:

• Closing unnecessary windows
• Disconnecting external displays
• Reducing open browser tabs
• Stopping screen-recording software
• Logging out and back in
• Restarting the Mac

What Is mds or mdworker?

Processes such as mds, mdworker and related entries are associated with Spotlight indexing.

Spotlight creates an index so macOS can find files quickly.

These processes may use significant CPU after:

• A macOS update
• Restoring from a backup
• Adding a large external drive
• Moving many files
• Connecting new storage
• Installing a new Mac

Indexing can take time.

If the activity gradually reduces, it is usually best to leave it to finish.

If it continues indefinitely, there may be a storage, permissions or indexing problem that needs further investigation.

What Is a Helper Process?

Many applications use helper processes.

Examples include:

• Browser Helper
• Renderer
• GPU Process
• Update Helper
• Sync Helper
• Crash Reporter
• Audio Engine
• Background Agent

A helper process supports part of the main application.

If one helper is using excessive CPU, the related application is usually the place to start.

Quit the main application fully, reopen it and see whether the problem returns.

How to Investigate an Unfamiliar Process

Do not immediately force-quit a process just because you do not recognise its name.

Some unfamiliar processes are essential parts of macOS.

Before taking action:

1. Note the process name.
2. Check the User column.
3. Look at the Kind column.
4. Double-click the process.
5. Review its open files, parent process and statistics.
6. Identify which application installed it.
7. Check whether it appeared after a recent software change.

If the process belongs to a third-party application, update or uninstall that application if appropriate.

If it is a macOS system process, avoid interfering with it unless you understand its function.

How to Inspect a Process

Double-click any process in Activity Monitor to open more detailed information.

Depending on the macOS version, you may see information including:

• CPU usage
• Memory usage
• Open files and ports
• Parent process
• Process ID
• Threads
• Statistics

This can help you determine whether a process belongs to a specific application or background service.

The parent process is particularly useful because it may reveal which main application launched the helper.

How to Quit a Process Safely

When a process is clearly linked to an application you recognise, try quitting the application normally first.

Use:

Application Name > Quit

or press:

Command + Q

If the application does not respond, select it in Activity Monitor and use the stop button.

You may be offered two options:

Quit

This asks the application to close normally.

It gives the application an opportunity to save data and complete tasks.

Force Quit

This immediately terminates the process.

Use Force Quit only when the application is unresponsive and normal quitting has failed.

Unsaved work may be lost.

Do not force-quit unfamiliar system processes at random. Some will restart automatically, while others may log you out, close the desktop or destabilise the Mac.

Watch the CPU Load Graph

At the bottom of the CPU tab, Activity Monitor displays processor information.

You may see:

• System
• User
• Idle
• Threads
• Processes
• CPU Load

User

This represents processor activity used by applications and user-level processes.

System

This represents work being carried out by macOS and system-level services.

Idle

This shows how much processor capacity is currently unused.

A high Idle percentage means the CPU has plenty of available capacity.

A very low Idle percentage for an extended period suggests the processor is under heavy load.

High CPU Does Not Always Explain a Slow Mac

A Mac can feel slow even when CPU usage is modest.

The real problem may be:

• Insufficient memory
• Heavy disk activity
• A nearly full SSD
• Cloud synchronisation
• Network delays
• Thermal throttling
• A failing drive
• A slow external device
• Too many background processes

That is why Activity Monitor should be used as a complete diagnostic tool rather than focusing on one number.

Check the Memory Tab

Select Memory.

Pay particular attention to Memory Pressure at the bottom of the window.

Memory Pressure gives a better indication of memory health than the amount of free memory alone.

Green Memory Pressure

The Mac is managing memory comfortably.

Yellow Memory Pressure

The system is under pressure and may be compressing memory or relying more heavily on swap.

Red Memory Pressure

The Mac is struggling to meet memory demand, which can cause severe slowdowns.

Applications using large amounts of memory may need to be closed or restarted.

Persistent memory pressure can indicate that the Mac does not have enough RAM for the workload.

On Apple silicon Macs, memory is integrated and cannot normally be upgraded later.

Look at Swap Used

Swap is storage space used as temporary memory when physical memory is under pressure.

Some swap use is normal.

Very high swap use, combined with yellow or red memory pressure, may indicate that too many demanding applications are open.

Common causes include:

• Hundreds of browser tabs
• Virtual machines
• Video editing
• Large design files
• Teams and browsers running together
• Multiple creative applications
• Development tools
• Large spreadsheets

Restarting the Mac may temporarily clear swap use, but the long-term answer is to reduce workload or use a Mac with more memory.

Check the Energy Tab

The Energy tab is especially useful on MacBooks.

It shows which applications are having the greatest impact on battery life.

Look for:

• Energy Impact
• 12-hour Power
• Preventing Sleep
• App Nap
• Requires High Performance GPU, where relevant

An application with consistently high energy impact may also be responsible for heat, fan noise and short battery life.

Check the Disk Tab

The Disk tab shows which processes are reading and writing data.

Heavy disk activity can make the Mac feel slow even when CPU usage is not especially high.

Common causes include:

• Backups
• File synchronisation
• Spotlight indexing
• Antivirus scans
• Large file transfers
• Software updates
• Virtual machines
• Video editing

If one process is constantly writing large amounts of data, identify its related application before taking action.

Check the Network Tab

The Network tab shows which applications are sending and receiving data.

This can help identify:

• Cloud-sync activity
• Software downloads
• Backups
• Video meetings
• Browser activity
• Large uploads
• Unexpected network traffic

A slow application may be waiting for a network service rather than using excessive CPU.

Use Activity Monitor Over Time

A single snapshot does not always reveal the answer.

Keep Activity Monitor open while reproducing the problem.

For example:

1. Restart the Mac.
2. Open Activity Monitor.
3. Sort by CPU.
4. Launch the application that usually causes the slowdown.
5. Watch which processes rise to the top.
6. Close the application.
7. Check whether usage returns to normal.

This creates a clear before-and-after comparison.

Trace the Problem Methodically

A professional troubleshooting process changes one thing at a time.

Start by recording:

• When the slowdown occurs
• Which applications are open
• Which devices are connected
• Whether the Mac is charging
• Whether it is hot
• Whether the issue began after an update
• Which process appears near the top
• How long the high usage lasts

Then test one possible cause.

For example:

• Close one application
• Disconnect one dock
• Disable one browser extension
• Restart one sync client
• Install one update

Changing several things at once makes it difficult to know what solved the problem.

Common Fixes for High CPU Usage

Depending on the cause, useful steps may include:

• Restarting the affected application
• Restarting the Mac
• Updating macOS
• Updating the application
• Closing unnecessary browser tabs
• Removing unused browser extensions
• Disconnecting external devices
• Allowing indexing or synchronisation to finish
• Removing duplicate security tools
• Reviewing login items
• Freeing storage space
• Reinstalling a damaged application
• Checking for overheating

Avoid using random terminal commands or automated cleaning tools without understanding what they change.

When High CPU Is Normal

Do not interrupt legitimate work simply because the CPU percentage looks high.

High usage is expected during:

• Video exports
• Software compilation
• File compression
• Malware scans
• Backups
• Updates
• Spotlight indexing
• Large cloud synchronisation jobs
• Photo analysis
• Media conversion

The key question is whether the process is completing useful work and whether usage eventually falls.

When High CPU Is a Warning Sign

Further investigation is recommended when:

• One process remains high for hours
• The Mac is hot while idle
• Fans run constantly
• Battery life has dropped suddenly
• The Mac freezes repeatedly
• The same application crashes
• CPU usage returns immediately after restart
• A process has an unfamiliar or suspicious name
• High kernel_task usage is accompanied by heat
• The issue began after installing new software
• Several business Macs show the same problem

These patterns may indicate faulty software, conflicting security tools, hardware problems or an unsuccessful update.

Do Not Rely on “Mac Cleaner” Applications

Activity Monitor already gives you direct access to real performance information.

Many cleaner applications use alarming messages and vague claims to persuade users that the Mac is in urgent danger.

Some of these tools:

• Run continuously in the background
• Add their own login items
• Consume memory and CPU
• Remove files without explaining why
• Encourage unnecessary subscriptions
• Produce misleading performance scores

A proper diagnosis should identify the exact process causing the problem rather than promising to “clean” the entire Mac.

Activity Monitor on Business Macs

On a business-owned Mac, some high-usage processes may be essential.

These might include:

• Endpoint protection
• Backup agents
• Remote monitoring tools
• Device-management software
• VPN clients
• Network filters
• Cloud-sync applications

Do not disable or remove these without checking with your IT provider.

A security scan may temporarily affect performance, but disabling the software could create a much greater risk.

The correct approach is to investigate whether the tool is configured properly and whether two overlapping products are competing for resources.

When Activity Monitor Cannot Find the Cause

Activity Monitor is powerful, but it cannot diagnose every problem.

Seek professional support when:

• The Mac remains slow with low CPU usage
• Kernel panics occur
• The Mac restarts unexpectedly
• Disk Utility reports errors
• The Mac overheats
• Apple Diagnostics reports a fault
• The internal storage disappears
• The issue affects several users
• Important business software repeatedly crashes
• The Mac cannot stay running long enough to investigate

The cause may involve storage, memory, firmware, logic-board components or other hardware that requires deeper testing.

A Quick Activity Monitor Checklist

When your Mac feels slow:

1. Open Activity Monitor.
2. Select the CPU tab.
3. Sort by % CPU.
4. Watch for sustained high usage.
5. Identify the related application.
6. Quit the application normally.
7. Check Memory Pressure.
8. Review Disk and Network activity.
9. Restart and test again.
10. Install available updates.
11. Record recurring patterns.
12. Seek support if the issue continues.

How Hamilton Group Can Help

A slow Mac does not always need replacing.

In many cases, the cause is a misbehaving application, overloaded browser, background sync process, security-software conflict or poor system configuration.

Hamilton Group can help businesses identify the source of Mac performance problems and resolve them without relying on guesswork.

Our team can assist with:

• Activity Monitor analysis
• High CPU and memory investigations
• Apple silicon and Intel Mac support
• Browser and application troubleshooting
• Login-item audits
• Cloud-sync problems
• Endpoint-security reviews
• Overheating and hardware checks
• Device management
• Hardware lifecycle planning

We support individual Macs as well as mixed business environments containing Apple and Windows devices.

To arrange a Mac performance review or discuss proactive IT support for your business, call Hamilton Group on 0330 043 0069 or visit hgmssp.com.