tweakd

Tune macOS. Or do it entirely by hand.

A premium menu-bar app that toggles reversible system optimizations — live CPU/RAM, guided setup, one-tap presets. Prefer the Terminal? This page lists every tweak and the exact command to apply and revert it yourself. No app required.

macOS 15+ · Menu bar · Reversible · 48 tweaks + 6 actions

What it does

Apple-like tweaking, with nothing hidden.

tweakd drives the same defaults, pmset, sysctl, launchctl and mdutil commands you'd type yourself — wrapped in a native SwiftUI window, with a live status probe so a tweak only shows Applied when the system really changed.

48 reversible tweaks

Performance, Power, Snappiness, Privacy, Background Services, Network, Security & Network, Process Priority, and AI — each with a risk badge and a one-click revert.

Live metrics

CPU & RAM ring gauges read straight from the Mach kernel, a 90-second chart, and a one-tap Clear RAM.

Guided setup

A short wizard asks how you use your Mac and builds a tailored set that never disables what you rely on.

Honest privileges

User tweaks run with no prompt; admin tweaks use the native password dialog — no helper tool, no stored password.

Always reversible

Every tweak has a revert. Revert All restores stock in one click, and it can write an emergency Terminal script.

Menu-bar only

No Dock icon, negligible idle cost — sampling is ref-counted so it costs nothing when no gauge is on screen.

Do it by hand

Every tweak is just a command.

Should you prefer not to install the application, every optimization it performs remains fully available to you. Open Terminal (Applications → Utilities), paste the Apply command, and press Return; to undo a change, run its Revert command. tweakd simply automates these very same commands on your behalf.

What the app actually does. tweakd is essentially an automation layer over the commands on this page. Each toggle just runs the matching Apply or Revert command for you, then re-reads the system to confirm it really changed — nothing is hidden, and nothing is done that you can't type yourself.

The app adds a few conveniences on top — live CPU/RAM gauges, a guided-setup wizard, one-tap presets, one-click Revert All, and a Core Audio watchdog — but the essential feature, applying and reverting every optimization, is 100% doable straight from the command line, right here. The app just saves you the copy-pasting.

Three things to know before you paste:

① Lines marked sudo need an administrator password — Terminal asks once and the typing stays invisible, that's normal.
② Lines marked SIP off only take effect if System Integrity Protection is disabled (see Safety). Most Macs keep SIP on — skip these.
③ Some UI tweaks restart Dock or Finder (the screen blinks for a second) or ask you to log out and back in to fully take hold.

Performance

CPU, GPU and I/O headroom. A couple reset on reboot — reapply after restart if you want them permanent.

Disable Timer Coalescing

sudomoderateFaster

Stops the kernel from batching timers. Lower latency, slightly more wakeups.

Applysudo sysctl -w kern.timer.coalescing_enabled=0
Revertsudo sysctl -w kern.timer.coalescing_enabled=1

Disable App Nap

no sudomoderateFaster

Keeps background apps running at full speed instead of being throttled.

Applydefaults write -g NSAppSleepDisabled -bool YES
Revertdefaults delete -g NSAppSleepDisabled

Raise GPU Memory Limit

sudoadvancedresets on rebootFaster

Lets the GPU use up to ~75% of RAM — great for local ML / heavy graphics. The math reads your total RAM and sets three-quarters of it.

Applysudo sysctl -w iogpu.wired_limit_mb=$(( $(sysctl -n hw.memsize)/1024/1024*3/4 ))
Revertsudo sysctl -w iogpu.wired_limit_mb=0

Unthrottle Background I/O

sudomoderateFaster

Stops the kernel from throttling low-priority disk work, so background tasks finish faster.

Applysudo sysctl -w debug.lowpri_throttle_enabled=0
Revertsudo sysctl -w debug.lowpri_throttle_enabled=1

Server Performance Mode

sudoSIP offadvancedneeds rebootFaster

Biases the scheduler and memory for sustained throughput. Preserves your other boot-args. Takes effect after a reboot.

Applysudo nvram boot-args="serverperfmode=1 $(nvram boot-args 2>/dev/null | cut -f2-)"
Revertsudo nvram -d boot-args

Power

Keep the machine awake and at full tilt on every power source.

Keep Low Power Mode Off

sudosafeFaster

Guarantees Low Power Mode stays disabled on battery and adapter.

Applysudo pmset -a lowpowermode 0
Revertsudo pmset -a lowpowermode 1

Disable Power Nap

sudosafeBetter battery

Stops background wake-ups for mail, backups and updates while asleep.

Applysudo pmset -a powernap 0
Revertsudo pmset -a powernap 1

Skip Hibernation Image

sudoadvancedFrees disk

Frees RAM-sized disk space and speeds sleep. Trade-off: you lose safe-sleep if the battery fully dies.

Applysudo pmset -a hibernatemode 0
Revertsudo pmset -a hibernatemode 3

Snappiness

Strip UI animations and delays. All user-level, safe and reversible — several relaunch Dock or Finder (a one-second blink).

Instant Window Resizing

no sudosafeSnappier UI

Removes the animation when windows resize.

Applydefaults write -g NSWindowResizeTime -float 0.001
Revertdefaults delete -g NSWindowResizeTime

Disable Window Animations

no sudosafeSnappier UI

Turns off the open/close zoom on windows and dialogs.

Applydefaults write -g NSAutomaticWindowAnimationsEnabled -bool false
Revertdefaults delete -g NSAutomaticWindowAnimationsEnabled

Instant Dock Auto-Hide

no sudorestarts DockSnappier UI

Removes the delay before the Dock slides in and out.

Applydefaults write com.apple.dock autohide-delay -float 0 && defaults write com.apple.dock autohide-time-modifier -float 0.15 && killall Dock
Revertdefaults delete com.apple.dock autohide-delay; defaults delete com.apple.dock autohide-time-modifier; killall Dock

Turbo Key Repeat

no sudolog out to applySnappier UI

Fastest key repeat and shortest delay. Log out and back in to fully apply.

Applydefaults write -g KeyRepeat -int 2 && defaults write -g InitialKeyRepeat -int 15
Revertdefaults delete -g KeyRepeat; defaults delete -g InitialKeyRepeat

Faster Mission Control

no sudorestarts DockSnappier UI

Removes the Mission Control / App Exposé zoom animation.

Applydefaults write com.apple.dock expose-animation-duration -float 0 && killall Dock
Revertdefaults delete com.apple.dock expose-animation-duration; killall Dock

Instant Fullscreen Menu Bar

no sudorestarts DockSnappier UI

Removes the delay before the menu bar reveals in fullscreen apps.

Applydefaults write com.apple.dock fullscreen-delay -float 0 && killall Dock
Revertdefaults delete com.apple.dock fullscreen-delay; killall Dock

Disable Smooth Scrolling

no sudomoderateSnappier UI

Step-based scrolling instead of animated. Saves CPU when scrolling heavily.

Applydefaults write -g NSScrollAnimationEnabled -bool false
Revertdefaults delete -g NSScrollAnimationEnabled

Manual Window Tabbing

no sudomoderateSnappier UI

Stops apps from auto-merging windows into tabs. Trims WindowServer work.

Applydefaults write -g AppleWindowTabbingMode -string manual
Revertdefaults delete -g AppleWindowTabbingMode

Reduce Transparency

no sudosafeSnappier UIFrees resources

Cuts WindowServer GPU and RAM use by removing translucency and blur.

Applydefaults write com.apple.universalaccess reduceTransparency -bool true
Revertdefaults delete com.apple.universalaccess reduceTransparency

Reduce Motion

no sudosafeSnappier UI

Replaces Spaces / app-switch animations with quick fades. Snappier, less GPU work.

Applydefaults write com.apple.universalaccess reduceMotion -bool true
Revertdefaults delete com.apple.universalaccess reduceMotion

Disable Finder Animations

no sudorestarts FinderSnappier UI

Removes Finder's open/copy/resize animations.

Applydefaults write com.apple.finder DisableAllAnimations -bool true && killall Finder
Revertdefaults delete com.apple.finder DisableAllAnimations; killall Finder

Fast Minimize Effect

no sudorestarts DockSnappier UI

Uses the lightweight Scale effect instead of the Genie animation.

Applydefaults write com.apple.dock mineffect -string scale && killall Dock
Revertdefaults delete com.apple.dock mineffect; killall Dock

Disable App Launch Bounce

no sudorestarts DockSnappier UI

Stops the Dock icon from bouncing while apps open.

Applydefaults write com.apple.dock launchanim -bool false && killall Dock
Revertdefaults delete com.apple.dock launchanim; killall Dock

Privacy

Cut telemetry from macOS and your browsers. Browser tweaks take effect on the next browser launch.

Silence Crash Reporter

no sudosafeMore private

Stops the "application quit unexpectedly" dialogs.

Applydefaults write com.apple.CrashReporter DialogType none
Revertdefaults delete com.apple.CrashReporter DialogType

Disable Personalized Ads

no sudosafe · SIP on OKMore private

Stops Apple Advertising from using your data to target ads.

Applydefaults write com.apple.AdLib allowApplePersonalizedAdvertising -bool false
Revertdefaults write com.apple.AdLib allowApplePersonalizedAdvertising -bool true

Disable Diagnostics & Analytics

sudoSIP offmoderateMore private

Stops the analyticsd telemetry daemon. Only possible with SIP disabled.

Applysudo launchctl disable system/com.apple.analyticsd && sudo launchctl bootout system/com.apple.analyticsd
Revertsudo launchctl enable system/com.apple.analyticsd

Harden Chromium & Chrome Telemetry

no sudosafeMore private

Sets managed-policy flags across Chromium / Chrome / Brave / Edge to stop usage stats, crash reports, URL data collection, search-keystroke and spell-check phone-home. Core Safe Browsing stays on; browsers will show a "managed by your organization" note. Takes effect on browser restart.

Applyfor d in org.chromium.Chromium com.google.Chrome com.brave.Browser com.microsoft.Edge; do defaults write "$d" MetricsReportingEnabled -bool false defaults write "$d" UrlKeyedAnonymizedDataCollectionEnabled -bool false defaults write "$d" SafeBrowsingExtendedReportingEnabled -bool false defaults write "$d" SearchSuggestEnabled -bool false defaults write "$d" SpellCheckServiceEnabled -bool false done
Revertfor d in org.chromium.Chromium com.google.Chrome com.brave.Browser com.microsoft.Edge; do for k in MetricsReportingEnabled UrlKeyedAnonymizedDataCollectionEnabled SafeBrowsingExtendedReportingEnabled SearchSuggestEnabled SpellCheckServiceEnabled; do defaults delete "$d" "$k" 2>/dev/null done done

Disable Firefox Telemetry

no sudomoderate · replaces user.jsMore private

Writes a managed user.js into every Firefox profile to turn off telemetry, health-report upload, Shield studies, ping-centre and new-tab data collection. Survives Firefox updates. Replaces any existing user.js in each profile. Takes effect on Firefox restart.

Applyfor p in "$HOME/Library/Application Support/Firefox/Profiles/"*/; do [ -d "$p" ] || continue printf '%s\n' \ '// tweakd privacy — Firefox telemetry off' \ 'user_pref("toolkit.telemetry.enabled", false);' \ 'user_pref("toolkit.telemetry.unified", false);' \ 'user_pref("toolkit.telemetry.archive.enabled", false);' \ 'user_pref("datareporting.healthreport.uploadEnabled", false);' \ 'user_pref("datareporting.policy.dataSubmissionEnabled", false);' \ 'user_pref("app.shield.optoutstudies.enabled", false);' \ 'user_pref("browser.ping-centre.telemetry", false);' \ 'user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false);' \ 'user_pref("browser.newtabpage.activity-stream.telemetry", false);' \ 'user_pref("browser.discovery.enabled", false);' > "$p/user.js" done
Revertfor p in "$HOME/Library/Application Support/Firefox/Profiles/"*/; do f="$p/user.js" [ -f "$f" ] && grep -qE 'tweakd privacy|MacTweak privacy' "$f" && rm -f "$f" done

Background Services

Quiet the on-device analysis daemons. The photo/media ones are per-user agents — no SIP needed.

Disable Media Analysis

no sudomoderateFrees resourcesMore private

Stops background scanning of photos/videos for objects and scenes (mediaanalysisd).

Applylaunchctl disable gui/$(id -u)/com.apple.mediaanalysisd && launchctl bootout gui/$(id -u)/com.apple.mediaanalysisd
Revertlaunchctl enable gui/$(id -u)/com.apple.mediaanalysisd

Disable Photo Analysis

no sudomoderateFrees resourcesMore private

Stops face recognition and Memories generation in Photos (photoanalysisd).

Applylaunchctl disable gui/$(id -u)/com.apple.photoanalysisd && launchctl bootout gui/$(id -u)/com.apple.photoanalysisd
Revertlaunchctl enable gui/$(id -u)/com.apple.photoanalysisd

Disable Spotlight Indexing

sudoadvancedFrees resources

Turns off filesystem indexing on all volumes. Search still opens apps; it won't find file contents.

Applysudo mdutil -a -i off
Revertsudo mdutil -a -i on

Network

Privacy and throughput on the wire. The two buffer tweaks reset on reboot.

Stop Bonjour Advertising

sudomoderateMore private

Stops broadcasting services over Bonjour. AirDrop keeps working over AWDL.

Applysudo defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool true && sudo killall -HUP mDNSResponder
Revertsudo defaults delete /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements && sudo killall -HUP mDNSResponder

Enlarge TCP Buffers

sudomoderate · resets on rebootMore throughput

Raises max TCP send/receive buffers to 16 MB for higher throughput on busy local servers.

Applysudo sysctl -w net.inet.tcp.autorcvbufmax=16777216 net.inet.tcp.autosndbufmax=16777216
Revertsudo sysctl -w net.inet.tcp.autorcvbufmax=4194304 net.inet.tcp.autosndbufmax=4194304

Raise Socket Backlog

sudomoderate · resets on rebootMore throughput

Raises the max pending-connection queue (somaxconn) from 128 to 1024 so servers accept bursts of connections.

Applysudo sysctl -w kern.ipc.somaxconn=1024
Revertsudo sysctl -w kern.ipc.somaxconn=128

Security & Network

Firewall, DNS and kernel-level network tuning. Stop Bonjour Advertising, Enlarge TCP Buffers and Raise Socket Backlog — already covered in Network above — live here too in the app; see that section for their commands.

Enable Application Firewall

sudosafeHardenedMore private

Turns on the built-in Application Firewall so unsolicited incoming connections are blocked by default.

Applysudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
Revertsudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate off
Checksudo /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate

Enable Stealth Mode

sudosafe · needs firewall onHardenedMore private

Makes the Mac ignore ICMP ping and unsolicited probe packets instead of answering them. Requires the firewall to already be on.

Applysudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on
Revertsudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode off
Checksudo /usr/libexec/ApplicationFirewall/socketfilterfw --getstealthmode

Block Auto-Allow Signed Apps

sudomoderate · more firewall promptsHardened

Stops the firewall from automatically trusting Apple-signed and developer-signed apps — every app has to be approved individually, at the cost of more "Allow incoming connections?" prompts.

Applysudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off --setallowsignedapp off
Revertsudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned on --setallowsignedapp on
Checksudo /usr/libexec/ApplicationFirewall/socketfilterfw --getallowsigned

Use Privacy DNS (Cloudflare)

sudomoderate · per network serviceMore privateHardened

Points DNS at Cloudflare's 1.1.1.1 / 1.0.0.1 privacy resolver instead of your ISP's default. Honest caveat: this is still plaintext DNS — macOS has no command-line switch for encrypted DNS-over-HTTPS/TLS, that requires installing a configuration profile. The app applies this to every active network service; the command below targets Wi-Fi — repeat with each name from networksetup -listallnetworkservices for the rest.

Applysudo networksetup -setdnsservers Wi-Fi 1.1.1.1 1.0.0.1
Revertsudo networksetup -setdnsservers Wi-Fi Empty
Checknetworksetup -getdnsservers Wi-Fi

Disable IPv6

sudoadvancedper network serviceHardened

Turns off IPv6 on a network service, shrinking the attack surface to IPv4 only. Repeat per active service (Wi-Fi, Ethernet…). Can break IPv6-only networks — check with your ISP first if unsure.

Applysudo networksetup -setv6off Wi-Fi
Revertsudo networksetup -setv6automatic Wi-Fi
Checknetworksetup -getinfo Wi-Fi

Enable TCP Window Scaling

sudomoderate · resets on rebootMore throughputLower latency

Raises the TCP window-scale factor so high-bandwidth, high-latency links (fast Wi-Fi, long-haul VPNs) can keep more data in flight.

Applysudo sysctl -w net.inet.tcp.win_scale_factor=8
Revertsudo sysctl -w net.inet.tcp.win_scale_factor=3
Checksysctl -n net.inet.tcp.win_scale_factor

Raise Max File Descriptors

sudomoderate · resets on rebootMore throughput

Raises the system-wide and per-process open-file limits, for apps and servers that hit "too many open files" under load.

Applysudo sysctl -w kern.maxfiles=524288 kern.maxfilesperproc=262144
Revertsudo sysctl -w kern.maxfiles=122880 kern.maxfilesperproc=61440
Checksysctl -n kern.maxfilesperproc

Process Priority

Scheduling priority via renice — a lower nice value means higher CPU priority (range −20…19, default 0). Raise the processes you rely on, or lower the ones you don't.

Raise mDNSResponder

sudomoderate · resets on rebootLower latency

Gives the DNS/Bonjour resolver daemon scheduling priority, so name lookups and mDNS stay snappy under load.

Applysudo renice -n -5 -p $(pgrep mDNSResponder)
Revertsudo renice -n 0 -p $(pgrep mDNSResponder)
Checkps -o pid,nice,comm -p $(pgrep mDNSResponder)

Raise Firefox

sudomoderate · resets on rebootLower latency

Gives Firefox scheduling priority over background daemons — smoother tab switching and scrolling when the system is busy.

Applysudo renice -n -5 -p $(pgrep -f "Firefox.app")
Revertsudo renice -n 0 -p $(pgrep -f "Firefox.app")
Checkps -o pid,nice,comm -p $(pgrep -f "Firefox.app")

Raise Google Chrome

sudomoderate · resets on rebootLower latency

Gives Chrome scheduling priority over background daemons.

Applysudo renice -n -5 -p $(pgrep -f "Google Chrome")
Revertsudo renice -n 0 -p $(pgrep -f "Google Chrome")
Checkps -o pid,nice,comm -p $(pgrep -f "Google Chrome")

Raise Docker

sudomoderate · resets on rebootLower latency

Gives Docker Desktop's processes scheduling priority — fewer stalls in containers while the rest of the system is busy.

Applysudo renice -n -5 -p $(pgrep -f "com.docker")
Revertsudo renice -n 0 -p $(pgrep -f "com.docker")
Checkps -o pid,nice,comm -p $(pgrep -f "com.docker")

Raise SSH sessions

sudomoderate · resets on rebootLower latency

Gives incoming SSH sessions scheduling priority, so remote terminals stay responsive under local load.

Applysudo renice -n -5 -p $(pgrep -f "sshd")
Revertsudo renice -n 0 -p $(pgrep -f "sshd")
Checkps -o pid,nice,comm -p $(pgrep -f "sshd")

Lower Media Analysis (yield CPU)

sudomoderate · resets on rebootFrees resources

Drops mediaanalysisd's scheduling priority so it yields the CPU to whatever you're actively doing.

Applysudo renice -n 10 -p $(pgrep -f "mediaanalysisd")
Revertsudo renice -n 0 -p $(pgrep -f "mediaanalysisd")
Checkps -o pid,nice,comm -p $(pgrep -f "mediaanalysisd")

Reset One Process

sudo

Puts any single process back to the default nice value of 0 — the manual escape hatch for a single PID.

Runsudo renice -n 0 -p <pid>

Apply at Login (Persistence)

no sudo to writewrites a LaunchAgent

Because renice resets on reboot, tweakd's Apply at login option writes a per-target LaunchAgent that waits 15 seconds after login (so the target app has time to launch), then reapplies the same renice through a passwordless sudo rule. Below is the exact plist the app writes for Firefox — replace the label, path and pgrep pattern to build one for another target.

~/Library/LaunchAgents/app.tweakd.priority.firefox.plist<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>app.tweakd.priority.firefox</string> <key>ProgramArguments</key> <array> <string>/bin/sh</string> <string>-c</string> <string>sleep 15; /usr/bin/sudo -n /bin/zsh -c 'renice -n -5 -p $(pgrep -f "Firefox.app")' 2>/dev/null; true</string> </array> <key>RunAtLoad</key> <true/> </dict> </plist>
Loadlaunchctl load ~/Library/LaunchAgents/app.tweakd.priority.firefox.plist
Removelaunchctl unload ~/Library/LaunchAgents/app.tweakd.priority.firefox.plist; rm ~/Library/LaunchAgents/app.tweakd.priority.firefox.plist

Read before you raise anything below −5. The app caps every priority change at -10 and warns before applying anything more negative than -5 — an overly negative nice value can starve the UI and other apps of CPU time, making the whole Mac feel worse, not better.

Changes made with renice alone reset on reboot; turn on Apply at login above if you want a target to keep its priority across restarts.

Emergency reset: run sudo renice -n 0 on every process you've raised or lowered, then remove any ~/Library/LaunchAgents/app.tweakd.priority.*.plist LaunchAgents you created.

AI & Intelligence

Turn off Siri, proactive suggestions and lookup phone-home. All per-user — no SIP needed.

Disable Siri Assistant

no sudomoderateFrees resourcesMore private

Boots out the Siri assistant agent (assistantd) and hides its menu bar item.

Applydefaults write com.apple.Siri StatusMenuVisible -bool false && launchctl disable gui/$(id -u)/com.apple.assistantd && launchctl bootout gui/$(id -u)/com.apple.assistantd
Revertdefaults delete com.apple.Siri StatusMenuVisible; launchctl enable gui/$(id -u)/com.apple.assistantd

Disable Proactive Intelligence

no sudomoderateFrees resourcesMore private

Stops duetexpertd — the on-device daemon behind Siri Suggestions and predicted actions.

Applylaunchctl disable gui/$(id -u)/com.apple.duetexpertd && launchctl bootout gui/$(id -u)/com.apple.duetexpertd
Revertlaunchctl enable gui/$(id -u)/com.apple.duetexpertd

Disable Siri Suggestions in Lookup

no sudosafeMore private

Stops sending lookup queries for Siri-powered suggestions.

Applydefaults write com.apple.lookup.shared LookupSuggestionsDisabled -bool true
Revertdefaults delete com.apple.lookup.shared LookupSuggestionsDisabled

One-shot Actions

Not toggles — run once, on demand. Nothing to revert.

Purge Inactive Memory

sudoFrees RAM

Forces the memory manager to free inactive pages right now (the Dashboard's Clear RAM button).

Runsudo purge

Flush DNS Cache

sudo

Clears the resolver cache and reloads mDNSResponder.

Runsudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

Restart Dock & Finder

no sudo

Applies UI tweaks and clears stuck windows.

Runkillall Dock Finder

Purge Bloat Daemons Now

sudo

Sends a polite terminate to heavy AI/analytics daemons. They may respawn — pair with the toggles above to keep them down.

Runfor p in mediaanalysisd photoanalysisd analyticsd spotlightknowledged knowledgeconstructiond geoanalyticsd; do sudo killall -TERM $p 2>/dev/null done

Restart Core Audio

sudo

Restarts coreaudiod to fix stuck audio or runaway CPU. It relaunches automatically; audio blips for a second.

Runsudo killall coreaudiod

Rebuild Spotlight Index

sudorebuilds data

Erases and rebuilds the Spotlight index for the boot volume. Search is degraded until it finishes.

Runsudo mdutil -E /

Before you start

Privileges, SIP & safety.

Everything here is reversible. A few ground rules so nothing surprises you.

No sudo
User-level tweaks (defaults, per-user launchctl) apply instantly with no password.
sudo
Admin tweaks touch system state — Terminal asks for your password once per session. Your keystrokes are invisible while typing; that's expected.
SIP off
System Integrity Protection guards system daemons and NVRAM. Tweaks marked SIP off silently do nothing while SIP is on. Check yours with csrutil status. Disabling SIP means rebooting into Recovery and running csrutil disable — only do this if you understand the trade-off.
Resets on reboot
sysctl tweaks (GPU limit, TCP buffers, socket backlog, window scaling, file descriptors), nvram, and renice priority changes live in memory/firmware — reapply after a restart, or use Apply at login for priority, to make them stick.
Reversibility
Every Apply here has a Revert. Reverts use defaults delete to restore the macOS default rather than guessing a value.

Verify any change yourself. Read a current value before and after with the same tools — e.g. defaults read -g NSWindowResizeTime, pmset -g | grep powernap, or sysctl -n kern.ipc.somaxconn. tweakd does exactly this after every change, which is why it only marks a tweak Applied when the system truly reports the new state.

Prefer the app? tweakd wraps all of the above with a live status probe, one-tap presets, a guided setup, and a Revert All button. It's a menu-bar app for macOS 15+ — not sandboxed and locally signed, because it drives pmset, mdutil, launchctl and defaults and escalates through the native macOS password prompt.

Get tweakd.

A lightweight menu-bar app for macOS 15+. Everything on this page, one click away — or keep it all manual.