--- title: "akd: what it is, why it connects to Apple, and whether to block it · Kilobat" url: "https://kilobat.app/processes/akd" description: "akd is the AuthKit daemon that signs a Mac in to your Apple Account. What Apple documents about it, why it connects, and what breaks if you block it." --- Security and accounts # What is akd? `akd` is the daemon of AuthKit, the macOS framework for Apple Account sign-in. Apple publishes no man page for it, but its launchd services name sign-in, Sign in with Apple and passkeys. Process: `akd` · Made by Apple · Applies to: macOS 14 Sonoma and later. Checked on macOS 27.2. · Checked: 1 November 2026 ## Short answer Part of macOS, not documented by Apple. It is the AuthKit daemon, and its launchd services cover Apple Account sign-in and Sign in with Apple. Don’t block Don't block it. Signing in to your Apple Account, and every service that needs it, can fail. Path `/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd` launchd label `com.apple.akd` Signing identifier `com.apple.akd` ## What it is Apple publishes no man page for `akd`. The program is in `AuthKit.framework`, signed by Apple, and launchd starts it for the system and for each user as `com.apple.akd`. Its launchd property lists name services such as `com.apple.ak.auth.xpc`, `com.apple.ak.signinwithapple.xpc`, `com.apple.ak.appleidpasskey.xpc` and `com.apple.ak.privateemail.xpc`. Apple's host list says that devices must reach `idmsa.apple.com`, `gsa.apple.com` and `account.apple.com` to authenticate an Apple Account. That is required for iCloud, app installs and Xcode. ## Why it uses the network - **Apple Account sign-in.** Signing in, or confirming your password or a two-factor code, talks to Apple's account servers. - **Sign in with Apple.** Its launchd service names include Sign in with Apple, which apps and websites use. - **Scheduled checks.** Its launchd property list schedules background tasks, such as a Sign in with Apple health check. Apple doesn't say what they send. ## How much is normal Short, small connections are usual, after sign-in and from time to time in the background. It is part of almost every Apple service that needs your account, so it runs often. Large traffic isn't expected. Account data is small. ## When it uses a lot, and why - **Not documented as heavy.** Apple documents no large transfers for `akd`. If you see them, check the remote addresses with `lsof`. ## Is it safe to block? Don’t block Don't block it. Signing in to your Apple Account, and every service that needs it, can fail. What breaks if you block it - Signing in to iCloud, the App Store and other Apple services can fail. - Sign in with Apple in apps and on websites can fail. - Two-factor codes and account checks may not complete. Blocking means a firewall rule that refuses its connections. Don’t quit or disable a macOS process to save data: macOS starts it again, and other features depend on it. ## Reduce its use 1. There is no setting to reduce it. Its traffic is the minimum that your Apple Account needs. 2. If you don't use an Apple Account on this Mac, sign out in System Settings. Click your name, then Sign Out. 3. Don't quit `akd` in Activity Monitor. macOS starts it again. ## See how much it uses 1. Open Activity Monitor from Applications › Utilities. Click Network. 2. Type `akd` in the search field. The Sent Bytes and Rcvd Bytes columns show what it moved since it started. 3. In Terminal, watch only this process. Press d to show the change per second, and q to quit. ``` nettop -p 'akd' -P ``` ## With Kilobat 1. In the Kilobat app list, search for `akd`. Its row shows the live rate and what it moved today. 2. In Connections, click the ⓘ button on one of its rows. The popover shows this page’s short answer, without going online. 3. In Terminal, ask the same question. Add `--json` for scripts and agents. ``` kilobat explain 'akd' ``` 4. Show its traffic over one day. ``` kilobat bandwidth 'akd' day ``` 5. Through MCP, an AI agent asks `explain_connection` with the process name. It gets the same facts. The live view and the explanations are free. History in the app needs Kilobat Pro. Blocking needs Pro and the network filter: see the [network filter](https://kilobat.app/docs/blocking#filtering), [Protection](https://kilobat.app/docs/blocking#protection) and the [hotspot data saver](https://kilobat.app/save-hotspot-data). ## Hosts it contacts Apple and the maker document these hosts for this feature. A process can also contact others; Kilobat’s Connections tab shows what it actually opens on your Mac. - [idmsa.apple.com](https://kilobat.app/hosts/idmsa-apple-com): Apple's Apple Account authentication hosts. Signing in to iCloud, the App Store and Xcode needs them. - [account.apple.com](https://kilobat.app/hosts/account-apple-com): Apple's hosts for Apple Account authentication in Settings and System Settings. ## What isn’t documented Apple publishes no man page for `akd`. This page relies on its launchd property lists and on Apple's host list for Apple Account authentication. ## Questions **Is akd a virus?** No. It is in the AuthKit framework of macOS, signed by Apple, and launchd starts it from Apple's own property lists. **Why does akd connect when I am not signing in?** Its launchd file schedules background tasks. Apple doesn't document what they are for. ## Sources - launchd property lists com.apple.akd (system and user), macOS 27.2 - [Apple Support: Use Apple products on enterprise networks](https://support.apple.com/en-us/101555) - [Apple Platform Security: Apple Account security](https://support.apple.com/guide/security/apple-account-security-secbd5822138/web) Checked on 1 November 2026. ## Related - [secd](https://kilobat.app/processes/secd): Part of macOS. It controls access to keychain items. With iCloud Keychain on, your passwords and other synced items travel between your devices. - [findmydeviced](https://kilobat.app/processes/findmydeviced): Part of macOS. findmydeviced runs Find My Mac. searchpartyd is another Find My daemon that Apple doesn't describe in its man page. - [appstoreagent](https://kilobat.app/processes/appstoreagent): Part of macOS. They download and update apps from the App Store, so app downloads show under them, not under the App Store app.