Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Reach9

macrumors 68020
Original poster
Hey all, not sure if this is a stupid question.

Recently I went to change a file permission on my Mac, I clicked Get Info and I went down saw that it said my name and "everyone" under Sharing and Permissions. I clicked the + button to add a user and I saw my name there and Administrator and then _fpsd

Who or what is _fpsd? Has someone hacked into my Mac? Is someone using my Mac? I can't see them under Users & Groups in System Preferences. How should I remove _fpsd if someone else is in my Mac?

Any feedback would be great, thanks!
 
I don't recognize that particular user name, but it's in the common form for macOS background services. You might find its description in the passwd file. Run Terminal and type:

Code:
grep _fpsd /etc/passwd

A wild guess would be that you've installed a Frames-Per-Second monitor for games.
 
I don't recognize that particular user name, but it's in the common form for macOS background services. You might find its description in the passwd file. Run Terminal and type:

Code:
grep _fpsd /etc/passwd

A wild guess would be that you've installed a Frames-Per-Second monitor for games.

Thanks for getting back to me! I just typed that in and nothing popped up but it started a process, it seems like I need to input something else after that in Terminal?
 
Thanks for getting back to me! I just typed that in and nothing popped up but it started a process, it seems like I need to input something else after that in Terminal?
Don't forget to type a Return at the end. The "grep" command you entered will then search for the text pattern "_fpsd" in the text file "/etc/passwd", which is a list of all users known to the machine. If found, it will output the line of text containing it, which should include a short description of that user. If not found, you get nothing back, just the next prompt.
 
Don't forget to type a Return at the end. The "grep" command you entered will then search for the text pattern "_fpsd" in the text file "/etc/passwd", which is a list of all users known to the machine. If found, it will output the line of text containing it, which should include a short description of that user. If not found, you get nothing back, just the next prompt.

Yeah I didn’t get anything back. This feels weird!
 
Apparently /etc/passwd is only for single-user mode now-- the real stuff is in individual plist files in /var/db/dslocal/nodes/Default. Try in Terminal:

Code:
sudo -s
cd /var/db/dslocal/nodes/Default
ls

You can also test using the id command:

Code:
id _fpsd
 
Strangely enough, _fpsd is showing up in my Printer Sharing pane of System Preferences. I cannot delete it and a restart of the computer and printer does not make it go away. I am also now unable to print to this printer (connected to a Mac by USB) from my MacBook Pro or a Mac Mini elsewhere in the house. Wifi is with AEBS AC router.
 
Hey Guys.
Not sure if this is normal but I've got 2 other users under the name 'Red'(user) and 'Red'(group) along with '_fpsd' Then there's a group called 'Administrators'. I've tried the ls and sudo - s codes but I'm not really sure what I'm looking for. This is the response I get for ls

Screen Shot 2022-08-13 at 00.32.54.png

Below, are the users I personally haven't registered.
Screen Shot 2022-08-13 at 00.43.35.png

I'm not very literate at code I'm afraid. Your help would be super appreciated!
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.