How to Disable System Integrity Protection (SIP) on Mac

Step-by-step guide for macOS El Capitan and later

⚠️ SIP protects critical system files. Only disable it if you know what you are doing. Re-enable it after you finish your task.

What is System Integrity Protection (SIP)?

System Integrity Protection — also known as rootless — is a macOS security feature introduced in OS X El Capitan. It prevents potentially malicious software from modifying protected files and folders on your Mac, even if you have root-level access.

While SIP is effective for the vast majority of Mac users, some advanced users — especially those running cracked apps or applying patches — need to disable it temporarily.

How to Disable SIP on Mac

Follow these exact steps to turn off System Integrity Protection:

  1. Restart your Mac — Go to Apple menu → Restart
  2. Before macOS starts up, hold down Command (⌘) + R and keep it held until you see an Apple logo and progress bar
  3. Release the keys — your Mac will boot into Recovery Mode
  4. From the top menu, click Utilities → Terminal
  5. In Terminal, type the following command exactly and press Return:
csrutil disable

Terminal will display a confirmation message that SIP has been disabled. Then:

  1. Click the Apple menu ()Restart
  2. Your Mac will restart with SIP disabled

How to Check SIP Status

To verify whether SIP is currently enabled or disabled, open Terminal (without rebooting) and type:

csrutil status

You will see one of these messages:

System Integrity Protection status: enabled. System Integrity Protection status: disabled.

How to Re-Enable SIP (Recommended)

After you are done, always re-enable SIP to keep your Mac secure. Follow the same steps above, but this time type:

csrutil enable

Restart your Mac and SIP will be active again.

When Do You Need to Disable SIP?

  • Installing cracked or patched Mac applications
  • Applying CORE KG or Special K patches
  • Running certain system-level tools and tweaks
  • Modifying system directories that SIP protects
💡 After installing your app or applying your patch, always go back and run csrutil enable to restore SIP protection on your Mac.