What Is Google Software Update (Keystone)? Is It Safe to Disable at Startup?

What Is Google Software Update (Keystone)?

Google Software Update, also called Keystone, is Google's background updater for macOS. It checks for and installs updates for Google apps such as Chrome, and may also be used by other Google software you installed.

On macOS, it usually runs in the background through Google-installed launch items rather than as something you open yourself. The executable name GoogleSoftwareUpdateAgent matches Google's updater component.

Is It Safe?

Usually, yes. If it was installed with Chrome or another Google app and the publisher is Google LLC, it is normally legitimate.

Because malware can use familiar names, verify it if you are unsure. In Activity Monitor, select the process, inspect its file path, and check whether it lives inside a Google-related location. You can also check the app or binary in Finder with Get Info or use System Settings > Privacy & Security to review security details if macOS shows them. If the file is in an unusual location, unsigned, or not tied to Google software you installed, treat it as suspicious.

Should I Disable It at Startup?

Usually optional. Disabling Keystone at startup will not usually stop Chrome or other Google apps from opening, but it can prevent them from updating automatically in the background.

That means you may miss security and bug-fix updates until you update manually from inside the app or reinstall/update it another way. For most people, leaving it enabled is the safer choice. Disable it only if you specifically do not want Google apps checking for updates in the background and you are willing to update them yourself.

If you no longer use any Google apps on the Mac, removing those apps is a better fix than only disabling the updater.

Why Is It Using High CPU or Memory?

Short bursts of activity are normal when it is checking for updates or installing one. It should not stay busy for long.

If CPU or memory use stays high, common causes include a stuck update, a damaged Google app install, repeated relaunch attempts, or multiple Google update components conflicting. Restarting the Mac may clear a one-off update loop. If it keeps happening, update or reinstall the affected Google app, or remove unused Google software so the updater has less to manage.

If the process name matches but the file location looks wrong, investigate it instead of assuming it is safe.

How to Disable or Remove It

On macOS, Google updaters are commonly started by Launch Agents. You can disable the related Google launch item, but the exact label can vary.

If you want to keep Google apps but stop background updating, disable the Google updater launch item and then update apps manually. If you want it gone completely, uninstall the Google apps that installed it. Removing only the launch item may not last, because reinstalling or updating Google software can add it back.

Be careful not to delete unrelated system launch items.

Where Kudu Helps

Kudu can show macOS startup items such as Launch Agents, so you can find Google's updater entry and disable it without hunting through folders manually. If the process is active right now, Kudu's Performance Monitor can confirm whether GoogleSoftwareUpdateAgent is actually the one using CPU or memory.

If you are unsure whether the item is legitimate, use Kudu to identify the running process first, then verify its location and signature in macOS before removing anything.

Download Kudu Free →