Apps and helpers
“App Helper (Renderer)”: what Electron helpers are, and whether to block them
Many Mac apps are built on Electron, which bundles Chromium. They run helper processes named after the app, such as “Code Helper (Renderer)”. The app's own traffic often shows under these helpers.
Short answer
Part of an app built on Electron. Electron apps run their windows and their network work in helper processes, so the app's traffic shows under “App Helper”.
Block with care
Blocking a helper breaks the app it belongs to. Block or pause the app itself, or block the host it shouldn't reach.
- Path
/Applications/<App>.app/Contents/Frameworks/<App> Helper.app/Contents/MacOS/<App> Helper
What it is
Electron's documentation says that each app has one main process. It spawns a separate renderer process for each open window and each web embed.
Electron's distribution guide says that the helper app is named Electron Helper by default. Developers rename it after their app, such as MyApp Helper, so Activity Monitor shows the app's name.
Because Electron bundles Chromium, its helpers work like Chrome's. See Google Chrome Helper.
Many Electron apps update with Squirrel.Mac, whose installer is ShipIt.
Why it uses the network
- The app's own work. Chat messages, calls, sync and web content in the app go through its main process and helpers.
- Updates. Electron apps that use Squirrel.Mac download updates in their own process before ShipIt installs them.
How much is normal
The traffic is whatever the app does. A chat app is light until someone shares a video; a call app is heavy during calls.
Several helpers per app is normal. Each window or web embed can have its own renderer.
Look at the app's name in the helper. That is the app to examine.
When it uses a lot, and why
- Calls and video. Electron-based call and meeting apps send and receive video in their helpers.
- Sync and attachments. Apps that sync workspaces, notes or files download and upload in the background.
- Updates. A new version downloads in full in the app's process.
Is it safe to block?
Block with care
Blocking a helper breaks the app it belongs to. Block or pause the app itself, or block the host it shouldn't reach.
What breaks if you block it
- The app's windows may stop loading or updating.
- Its sign-in, sync and calls may fail.
- Its updates can't download.
Blocking means a firewall rule that refuses its connections. Don’t quit or disable a macOS process to save data: macOS starts it again, and other features depend on it.
Reduce its use
Find the app's name in the helper's name. Open that app's settings.
Turn off automatic downloads of media and files, if the app has them.
Turn off automatic updates in the app while you are on a hotspot, if it has that option.
See how much it uses
Open Activity Monitor from Applications › Utilities. Click Network.
Type
Electron Helperin the search field. The Sent Bytes and Rcvd Bytes columns show what it moved since it started.In Terminal, watch only this process. Press d to show the change per second, and q to quit.
nettop -p 'Electron Helper' -P
With Kilobat
Kilobat groups helpers under the app they belong to in the app list.
In Connections, click ⓘ on a helper's row. The popover explains the host it talks to.
Ask the same question in Terminal.
kilobat explain 'Electron Helper'
The live view and the explanations are free. History in the app needs Kilobat Pro. Blocking needs Pro and the network filter: see the network filter, Protection and the hotspot data saver.
Questions
Why is “Slack Helper (Renderer)” using data?
It is part of Slack. Electron apps load their windows in renderer helpers, so Slack's traffic shows there.
Is an Electron Helper malware?
A helper belonging to a trusted Electron app is normally expected. Check its path in Activity Monitor's Open Files and Ports and verify the app if you are unsure.
Sources
- Electron documentation: Process model
- Electron documentation: Application distribution
- Electron documentation: autoUpdater
Checked on 1 November 2026.