What Is trustd? Is It Safe to Disable at Startup?
trustd is a built-in macOS security service that checks certificates and trust settings. It is safe and should usually be left enabled.
- Verdict
- Keep runningtrustd is a core macOS security process used for certificate validation and should normally stay running.
- File name
- trustd
- Publisher
- Apple Inc.
- Platforms
- macOS
- Reviewed
What Is trustd?
trustd is a built-in macOS background service from Apple. It handles certificate trust checks: for example, deciding whether a website certificate, app signature, email certificate or other signed item should be trusted by the system.
In plain terms, it helps macOS verify identity and encryption. Safari, Mail, software updates, signed apps and other network or security features may rely on it.
This is not a normal app you launch yourself. It is part of macOS and runs in the background when needed.
Is It Safe?
Yes, the real trustd from Apple is safe. It is a standard macOS system process.
Because security-related process names can be copied by malware, it is still worth checking the file if something looks wrong. On a normal Mac, trustd should be an Apple-signed system binary, not a file sitting in Downloads, your home folder or an app's private folder. In Activity Monitor, you can inspect the process and its path. If the path or signature does not look like an Apple system component, investigate it.
Do not force-remove or block the genuine system trustd process.
Should I Disable It at Startup?
No. Keep it enabled.
trustd is part of macOS, not a typical login item or optional helper. Disabling it can break certificate validation and cause problems with secure websites, signed apps, iCloud-related services, Mail, VPNs or other encrypted connections.
If you see trustd in process lists, that is normal. It is not something most users should try to disable.
Why Is It Using High CPU or Memory?
Short bursts of activity can be normal when macOS is checking certificates, opening signed apps, syncing trust settings or connecting to secure services.
Higher usage may happen if:
- an app is repeatedly failing certificate checks
- a website or mail server presents a problematic certificate
- the Mac is having network or time/date issues
- the trust cache or keychain-related data is being refreshed
- a buggy app is constantly triggering security checks
If usage stays high for a long time, first restart the Mac and test again. Also check whether the problem appears only when a specific browser, mail client, VPN or security tool is open. If trustd remains busy constantly, look for related errors in Console and make sure macOS is up to date.
How to Disable or Remove It
You generally should not disable or remove trustd.
It is a protected macOS system component, not a normal startup item managed through Launch Agents in the same way as third-party apps. If your goal is to reduce background activity, focus on optional login items, browser extensions, VPN clients or security tools that may be triggering repeated certificate checks instead.
If you suspect impersonation, verify the process path and Apple code signature before taking action.
Where Kudu Helps
Kudu can help you confirm whether trustd is just active in the background or actually causing a problem. Use Performance Monitor to see its CPU and memory use over time and spot which other apps were active at the same time.
On macOS, Kudu's Startup Manager is better used for optional Launch Agents and login items, not core Apple security services like trustd. If another app is causing repeated certificate activity, Kudu can help you find and disable that app's startup entry instead.
If you think the process is suspicious, Kudu's Malware Scanner can help check for persistence or other signs that a fake process is involved.
Frequently asked questions
- Is trustd a virus?
- The real `trustd` on macOS is not a virus. It is an Apple security service, but a fake process using the same name would be suspicious.
- Can I quit trustd in Activity Monitor?
- You may be able to force quit it temporarily, but macOS can start it again when needed. It is not a good candidate for permanent disabling.
- Why does trustd use the network?
- It may contact certificate or trust-related services while validating secure connections or signed content. Some network activity from it can be normal.
See every app that starts with your computer
Kudu’s Startup Manager lists Run keys, Startup folder entries, scheduled tasks, Launch Agents, and XDG autostart items in one place. On Windows it also shows each item’s boot time impact.
Download Kudu Free →