mDNSResponderSafe

What is mDNSResponder?

Publisher: Apple Inc.Typical location: /usr/sbin/mDNSResponder

mDNSResponder is a legitimate Apple macOS background service that helps your Mac find devices and services on local networks, such as printers, AirPlay devices, and shared computers. It is a normal part of macOS and is usually safe to leave alone.

What it does

mDNSResponder handles Bonjour networking on macOS. That means it helps your Mac discover and announce devices and services on the same network without manual setup. You may see it running even when nothing seems to be happening, because it supports system and app features that rely on local network discovery.

Is it safe?

Yes. The real mDNSResponder is a core Apple networking service and is safe to keep running. However, malware can sometimes use the same name to hide, so the file location and publisher matter. The legitimate process should be signed by Apple and usually run from /usr/sbin/mDNSResponder. If it is running from an unexpected folder or shows an unknown publisher, treat it as suspicious.

Why it causes high CPU or disk usage

  • 1A device or printer on the local network is misbehaving.
  • 2A weak or unstable Wi-Fi connection is causing repeated retries.
  • 3Bonjour discovery is looping because of network changes or duplicate services.
  • 4A third-party app is heavily using local network discovery.

How to check if it's legitimate

  1. Open Activity Monitor and find mDNSResponder.
  2. Check the process path in the information/details view, if available.
  3. Confirm it is located at /usr/sbin/mDNSResponder.
  4. Verify it is signed by Apple or shows Apple as the publisher in system security details.
  5. If the path is different, or the signature is missing or unknown, run a malware scan and review any recent network-related apps you installed.

How to remove it

You should not remove the real mDNSResponder, because it is a core macOS service. If CPU or disk usage is high, restart your Mac first, then check your Wi-Fi connection and nearby network devices. If the process appears in an unusual location or is not signed by Apple, do not trust it; quarantine it with your security tools and have it checked as possible malware.

Need more help?

Run a free diagnostic scan to identify and fix issues automatically.

Download Quickfix AI