By default, Safari on macOS includes a legacy convenience setting that automatically unpacks and launches files deemed “safe” immediately after download completes. Under this policy, Safari automatically decompresses ZIP archives into folders, opens downloaded PDF documents in Preview, and launches media clips or disk images (DMG files). While designed to streamline browsing, this automated behaviour can clutter your storage, consume unexpected processing cycles, and introduce severe security liabilities by expanding untrusted payloads without explicit user confirmation.
Disabling the Safe Files Setting in Safari Preferences
You can neutralise automatic file decompression and execution through Safari’s general configuration menu.
- Launch Safari on your Mac.
- Click Safari in the macOS menu bar at the top-left of the screen and choose Settings… (or press Command + ,).
- In the preferences window, click the General tab.
- Scroll down to the bottom of the General tab.
- Locate the checkbox labelled Open “safe” files after downloading.
- Uncheck the box next to Open “safe” files after downloading.
- Close the Settings window to apply the change immediately.
Following this adjustment, Safari will strictly save downloaded files in their native, untouched state (such as .zip, .tar.gz, or .pdf) directly into your configured Downloads folder, leaving you in total control of when and how files are extracted.
Security Risks of Automatic File Expansion
Apple defines “safe” files as movies, pictures, sounds, PDF and text documents, and safe archive formats. However, cybersecurity researchers frequently discover archive-based vulnerabilities where malicious actors bundle disguised scripts, application packages, or executable shortcuts inside compressed archives. If Safari decompresses these archives automatically:
- Loss of Quarantine Prompts: Automated extraction can bypass initial user visual scrutiny before a malicious package reaches the filesystem.
- Disk Space Inflation: Downloading massive multi-gigabyte ZIP archives automatically doubles the initial disk space used by creating both the raw compressed archive and the unpacked folder structure.
- Interrupted Workflows: Having Preview, Music, or Archive Utility unexpectedly pop open over your active workspace distracts from focused work.
Configuring Download Destination and Prompting
To further reinforce download control in Safari, you can instruct the browser to prompt for a target save destination before starting any download:
- Return to Safari > Settings > General.
- Find the File download location: drop-down menu.
- Change the selection from Downloads to Ask for each download.
Safari will present a standard Finder save dialogue for every web asset, allowing you to categorise documents directly into appropriate local project directories.