Background Items Added keeps appearing on a Mac: what it means
· 7 min read
The Background Items Added notification means an app has set something to run without its window open: a login item, a helper program or a launch agent. macOS has announced each new one since Ventura, so nothing starts quietly. To see them, open System Settings, General, Login Items & Extensions (plain Login Items on Ventura and Sonoma), where the Allow in the Background list shows each item with a switch. When the same alert keeps returning for the same app, it is usually that app registering its helper again after an update, or a stale record that macOS can rebuild.
What counts as a background item
Three kinds of thing set off the notification.
- Login items. Apps that open when you log in. They appear in the Open at Login list at the top of the same settings pane.
- Helpers. Separate programs that belong to an app and keep running when its window is closed: a sync engine, an update checker, a menu bar companion, or the software behind a printer, a mouse or an audio interface.
- Launch agents and daemons. Short instruction files that tell macOS to start a program and keep it running. Agents run for your account; daemons run for the whole Mac, before anyone logs in.
None of these is suspicious in itself. Cloud storage, backup software, password managers, VPN clients and device drivers all depend on them. The notification is there so you know when one is added, not because something has gone wrong.
See what was added and switch it off
- Click the notification, or open System Settings, General, Login Items & Extensions.
- Look under Allow in the Background. Some entries carry the developer’s name rather than the app’s, because the helper is signed by the company that makes the app.
- Turn an item’s switch off to stop it running. Nothing is deleted, and you can turn it back on at any time. macOS may ask for your password.
Then notice what changes. If the app stops syncing, loses its menu bar icon or complains when it opens, the helper was doing real work and its switch belongs back on. For an app you rarely open, leaving the helper off usually costs nothing.
Why the same alert keeps coming back
The notification appears when an item is registered, so a repeat usually has one of three causes.
- The app registers again after updates. Some apps register their helper each time they update, and macOS treats that as a new addition. An app that updates often produces the alert often.
- The record of items is out of step. On some Macs, the alert appears at every login for items that have not changed. That points to the record macOS keeps of background items rather than to the app. Install any pending macOS update first, then try the reset described below if it continues.
- An app you thought was gone is not. A launch agent left behind by a deleted app can still be listed, and can still try to start a program that no longer exists.
Find the file behind an item
The settings pane names items but does not say where they live. Launch agents and daemons are plain files in three folders:
~/Library/LaunchAgentsfor your own account/Library/LaunchAgentsfor every account on the Mac/Library/LaunchDaemonsfor the system
In Finder, choose Go, Go to Folder (Shift-Command-G), paste one of those paths and press Return. File names usually follow the developer’s web address written backwards, such as com.example.helper.plist, which is often enough to identify the owner. Many newer apps keep their helpers inside the app itself, so nothing appears in these folders, and deleting the app removes the helper with it.
For the complete list, Terminal has a command that prints everything macOS has recorded about background items, including the path, the developer and whether each one is allowed:
sudo sfltool dumpbtm
It asks for your password and produces a long listing; press Command-F in the Terminal window to find the app’s name. What is this folder on my Mac shows how to check who signed the program an item starts.
Remove what a deleted app left behind
If an item belongs to an app you have already deleted, remove it properly rather than only switching it off.
- Find its .plist file in one of the folders above and move it to the Trash. Files in the two folders under
/Libraryneed an administrator password. - Restart the Mac, or log out and back in.
- Check Login Items & Extensions again to confirm the item has gone.
Only remove files you can match to an app you no longer have. If you are not sure, switching the item off is the reversible choice. Uninstall an app on a Mac completely covers the other files an app leaves behind when you drag it to the Trash.
Reset the record if the alerts never stop
If the same alerts appear at every login even after a macOS update, reset the record:
sudo sfltool resetbtm
Then restart. Apps register their items again as they start up, so expect a round of fresh notifications, and any item you had switched off may need switching off again. Treat this as a last step, not a routine one.
When a name means nothing to you
An item you do not recognize is usually a helper from something installed long ago, or a company name you have not connected with one of your apps. Look up the developer name before deciding anything. If it is not something you installed and you cannot trace it, switch it off, find the file it points to, and read what to do if you think your Mac was compromised before deleting anything.
Cleaning up after apps is where a disk cleaner can help. Crumb is a menu bar disk cleaner whose Uninstall removes an app together with every leftover, so a helper does not stay behind to keep registering itself. Ask Crumb takes a plain-English question or a file you point it at, such as an unfamiliar .plist in LaunchAgents, explains what the item is, whether it regenerates and what breaks if it goes, then proposes a plan; nothing is deleted until you approve it. Uninstall and Ask Crumb are part of the one-time $9 unlock for up to two Macs. The read-only whole-Mac audit is free, and Crumb runs on macOS 12 Monterey or later.
Questions
Is the notification a sign of malware? Rarely on its own. It appears for ordinary apps every day. It deserves a closer look when it names something you did not install, or arrives right after you opened an unexpected download.
Will switching an item off break the app? It can stop the features that run while the app is closed, such as syncing, backups or update checks. The app itself still opens, and you can switch the item back on at any time.
Why does the list show a company I have never heard of? Entries are often labeled with whoever signed the helper, which can be a parent company or a developer’s legal name rather than the name of the app you know.