Mac Activity Monitor: The Complete 2026 Diagnostic Guide

Activity Monitor is the built-in macOS utility that shows every running process, how much CPU, memory, energy, disk, and network activity it is consuming, and lets you quit anything that is misbehaving. It is Apple’s answer to Windows Task Manager, and on macOS 26 Tahoe it is still the fastest free way to find out what is actually slowing a Mac down. This guide walks through every tab, corrects the memory and CPU myths that cause most of the panic, and lists exactly which processes you should never force quit.

How to Open Activity Monitor on Mac (All Methods)

Activity Monitor lives in the Utilities folder, but most people never dig through Finder to find it. There is no built-in keyboard shortcut, which is one of the most common complaints in search results for this app, but there are four reliable ways to launch it in under five seconds.

1. Spotlight (fastest): Press Command+Space, type “Activity Monitor,” and hit Return.
2. Finder: Go to Applications > Utilities > Activity Monitor.
3. Launchpad / App Library: In macOS 26 Tahoe, Launchpad has been folded into an App Library-style view; search or scroll to the Utilities group.
4. Terminal: Run open -a "Activity Monitor" if you are already in a terminal window.

If you want an actual keyboard shortcut, open System Settings > Keyboard > Keyboard Shortcuts > App Shortcuts, click the plus button, choose Activity Monitor from the application menu, and assign a combination like Command+Option+A. On a Mac so laggy that Activity Monitor itself takes ages to open, that is a sign of severe RAM starvation rather than a normal slowdown, and it is worth reading the Memory Pressure section below before doing anything else.

CPU Tab: Why 100%+ Is Normal and How to Spot a Real Problem

The CPU tab lists every process with a % CPU column, and on Apple Silicon that number is not capped at 100. Activity Monitor sums the active time across every core, so an 8-core M-series chip can legitimately show up to 800% total, and a 12-core chip up to 1200%. Seeing 300% during a Handbrake export or a Logic Pro bounce is expected behavior, not a red flag.

What actually matters is which type of core is doing the work, and Activity Monitor does not show that directly. Apple’s chips mix Efficiency (E) cores, which run at lower frequencies for background tasks, with Performance (P) cores that scale higher for heavy computation. macOS assigns work using Quality of Service (QoS) levels: a background indexing task gets a low QoS level and is deliberately confined to E-cores, even if every P-core is sitting idle, to protect battery life and thermal headroom.

That is why a process showing “100% CPU” in the list can mean two very different things: a lightweight background helper pinned to a slow E-core, or a demanding task hammering a fast P-core. Activity Monitor gives no frequency data to tell the difference, so use the CPU Time column instead, which totals processor time consumed since launch. A process with low instantaneous % CPU but enormous CPU Time is a slow, persistent drain worth investigating; a process spiking briefly at 400% during an export and dropping back down is just doing its job.

Set View > Update Frequency > Very Often to poll every second instead of the five-second default. That is the difference between catching a real spike and missing it entirely between refreshes.

Memory Pressure: The Only Memory Metric That Matters

Memory Pressure is a color-coded graph in the Memory tab that reflects how hard macOS is working to keep RAM available, and it is the single number that actually indicates a memory problem. Memory Used climbing toward your Mac’s total RAM is not, by itself, a warning sign: macOS deliberately fills unused RAM with cached files because unused memory is wasted memory. Judging RAM health by the “Used” figure alone is the most common misread in this entire app.

The pressure graph has three states, and they are worth memorizing:

• Green: Plenty of free or instantly reclaimable memory. Nothing to fix.
• Yellow: Free RAM has run out and macOS is compressing inactive pages to delay swapping to disk. Normal under heavy multitasking, especially on 8GB or 16GB configurations.
• Red: Compression alone is not enough, and macOS is actively writing to swap on the SSD. Sustained red with several gigabytes of swap use is the real sign a Mac needs more RAM or fewer open apps.

A small amount of Swap Used, even a few hundred megabytes, is completely normal on a Mac that has been awake for days and does not hurt performance. What does hurt performance is downloading a third-party “RAM cleaner”: these tools artificially force memory pressure to free RAM, which actually triggers more kernel-level pageouts and adds unnecessary write cycles to the SSD. If a Mac genuinely feels sluggish and Memory Pressure stays green, the bottleneck is somewhere else, most often disk space or a single runaway process, not RAM.

Energy Tab: Energy Impact, App Nap, and Battery Drain

The Energy tab ranks apps by Energy Impact, a proprietary relative score built from CPU use, wakeups, and disk activity, and it is not a measurement of watts. Apple calculates it using telemetry similar to the powermetrics tool, folding several signals into one dimensionless number so you can compare apps against each other. A score of 40 does not mean anything in isolation; it only means roughly double the drain of an app scoring 20.

One quirk worth knowing: kernel processes are exempt from Energy Impact tracking entirely, so the operating system’s own baseline power draw never shows up in this list. If your battery drains fast but nothing in the Energy tab looks unusual, the OS itself, not a rogue app, could be part of the story. Check the App Nap column too. A “Yes” there means macOS has already suspended timers and network access for a hidden or occluded window, cutting its energy use close to zero without quitting it.

Chrome, Slack, and Electron-based apps often top the Energy Impact list because of frequent background wakeups, which matches Apple’s own documentation on timer coalescing and App Nap. If you are chasing battery life on a MacBook, sort by Energy Impact rather than % CPU. A tab-hoarding browser will often outrank a video export tool that briefly spikes CPU but then returns to idle.

Disk & Network: Cumulative vs Real-Time Activity

The Disk and Network tabs show two very different kinds of numbers, and confusing them leads to false alarms. “Data read/written” and “Data sent/received” are cumulative totals since the last reboot, not live throughput, so a Mac with several weeks of uptime showing terabytes of kernel_task disk writes is normal, not evidence of a failing drive or malware.

What you should watch is the real-time rate at the bottom of the Disk tab. Constant, high-velocity disk activity when you are not actively doing anything usually points to one of two causes: heavy swap activity from RAM starvation (check Memory Pressure first), or Spotlight’s indexing daemon, mds_stores, rebuilding its search index after a system update or a new external drive.

There is also a secondary factor that rarely gets mentioned: SSDs can slow down as they fill because flash controllers need spare blocks for wear leveling and garbage collection. A nearly full drive can add latency even if Activity Monitor shows nothing unusual. If Activity Monitor shows normal CPU and green Memory Pressure but the Mac still feels sluggish, check available disk space before assuming a process problem. freeing up disk space on your Mac covers exactly how to claw that back.

Which Processes Can I Force Quit in Activity Monitor?

Only force quit non-system helper processes if they are causing a freeze; never force quit kernel_task or WindowServer.

Verdict: treat kernel_task and WindowServer as off-limits no matter how high their numbers climb, and treat everything else in this table as safe to quit if it is actively causing a freeze, since macOS will simply relaunch it.

Fixing Common Culprits: kernel_task, WindowServer, mds_stores

High CPU from these three processes generates more support threads than almost anything else in macOS, and each one has a specific, verified fix rather than a generic “restart your Mac” answer.

kernel_task spiking on an otherwise idle Mac almost always means thermal throttling: the kernel intentionally burns CPU cycles to keep the chip from overheating further. Clear vents, avoid running the Mac on a soft surface, and disconnect power-hungry external displays. On the small number of Intel Macs still supported by Tahoe (the 2019 16-inch MacBook Pro, the 2020 13-inch MacBook Pro with four Thunderbolt 3 ports, and the 2019 Mac Pro), an SMC reset is still a valid step; Apple Silicon Macs do not have that option and need a full restart instead.

WindowServer pegging a core usually follows connecting multiple high-resolution displays or running an Electron app that has not been updated for macOS 26’s Liquid Glass rendering changes. Turning on Reduce Transparency in Accessibility settings cuts the compositing load noticeably, and quitting outdated Electron apps (Slack, Discord, older Notion builds) resolves most cases within minutes.

mds_stores stuck for days, not minutes, means Spotlight’s index is corrupted rather than just rebuilding. The fix is a manual reset:

1. Open System Settings > Siri & Spotlight > Spotlight Privacy.
2. Drag your entire startup drive into the excluded list and wait about 60 seconds.
3. Remove the drive from the list to force a clean, full re-index.

This takes longer than letting a normal index finish, but it clears corruption that an ordinary reboot will not fix.

What Changed in Activity Monitor in macOS 26 Tahoe?

Activity Monitor in macOS 26 Tahoe received a more compact toolbar that adapts when the window is too narrow to show every column, and the whole OS gained GPU overhead from the Liquid Glass redesign’s translucent menu bars and dynamic reflections. That extra compositing work can increase WindowServer activity on some Macs, but it is not the same as a memory leak and does not require a fix unless WindowServer stays pegged at high CPU for long periods.

On security, macOS 26.6.1 patched CVE-2026-65400, a Screen Sharing vulnerability that let attackers on the same local network take over a Mac without valid credentials. If Activity Monitor’s Network tab shows unexpected sustained activity from Screen Sharing-related processes on an unpatched Mac, updating immediately is the fix, not just quitting the process. Also worth knowing: Tahoe is not Apple Silicon only. It still runs on a handful of late Intel Macs, and macOS 27 is the release that drops Intel entirely.

What Are the Best Activity Monitor Alternatives?

The best Activity Monitor alternative for most people is iStat Menus, a one-time purchase with live menu bar graphs, temperature sensors, and historical logs. Activity Monitor is free and built in, but it is a snapshot tool, not a monitoring dashboard. If you want persistent graphs and sensor data instead of opening an app every time something feels off, the options below compare the realistic choices.

Verdict: stick with Activity Monitor if you only check performance when something seems wrong, and get iStat Menus if you want live sensor and history data running all day. If you would rather not spend anything, our roundup of free Mac resource monitors covers the lighter alternatives worth trying first.

A few honest caveats worth stating plainly. Quitting every nonessential process in Activity Monitor does not reliably fix perceived slowness on its own, and some owners of base-configuration Macs conclude, correctly in some cases, that the real fix is more RAM or a faster machine rather than another round of process-hunting. Activity Monitor does not expose thermal throttling curves or unified memory bandwidth limits, so a calm-looking Activity Monitor cannot rule out hardware limits. Owners of base-configuration Macs regularly report long export times while Activity Monitor shows no obvious bottleneck, because the tool does not capture every limiting factor. And Activity Monitor will not explain what a normal-looking background process for something like Plex is actually doing at any given moment; it tells you what is running, not why.

If disk space or app clutter turns out to be the real issue behind the slowdown, clearing out apps you no longer use is often a faster win than chasing process names. See how to uninstall apps on Mac properly for the full removal steps, including leftover files most people miss. And if you are curious what is coming next for Intel Mac support and system internals, our breakdown of Apple OS 27 covers the transition in detail.

Key Takeaways

• CPU percentages over 100 are normal on multi-core Macs; Activity Monitor sums all cores, so an 8-core chip can show up to 800%.
• Memory Pressure, not Memory Used, is the metric that tells you if a Mac is actually RAM-starved. Green and yellow are fine; sustained red with heavy swap is the real problem.
• Never force quit kernel_task or WindowServer. High usage from either points to thermal issues or a graphics-heavy app, not a process to kill.
• Energy Impact is a relative score, not watts, and kernel processes are invisible to it, so battery drain can come from the OS itself.
• For daily monitoring instead of occasional checks, iStat Menus is a one-time purchase worth considering; for occasional troubleshooting, Apple’s official Activity Monitor guide and this article cover what most people need.

Frequently Asked Questions

Is there a keyboard shortcut to open Activity Monitor on Mac?

macOS doesn’t ship with a default keyboard shortcut for Activity Monitor, which is why so many people search for one. The fastest route is Command+Space to open Spotlight, then typing the first few letters of the app name. You can also assign your own shortcut in System Settings > Keyboard > Keyboard Shortcuts > App Shortcuts.

Why does Mac Activity Monitor show CPU usage over 100%?

Activity Monitor adds up the active time of every core, not just one. An 8-core Apple Silicon chip can show up to 800% and a 12-core chip up to 1200%, so 150% or 300% during a video export is normal. Only worry if a single process sits near the theoretical maximum for your chip while the Mac is otherwise idle.

Is it safe to force quit kernel_task or WindowServer?

No. kernel_task is the macOS kernel itself and force quitting it crashes the system, while WindowServer draws every window on screen and killing it logs you out immediately, closing unsaved work. High usage from either usually points to a thermal issue or a graphics-heavy app, not a process you should terminate.

What does yellow Memory Pressure mean on a Mac?

Yellow means macOS has run out of free RAM and is actively compressing inactive memory pages to avoid writing to disk. It’s a normal, temporary state on Macs with 8GB or 16GB of RAM running several apps at once. Sustained red pressure with multiple gigabytes of swap is the real warning sign.

Should I buy iStat Menus instead of using Activity Monitor?

Activity Monitor covers diagnosis fine for occasional troubleshooting, but iStat Menus adds persistent menu bar graphs, temperature and fan sensors, and historical logging that Apple’s tool doesn’t offer. It’s a one-time purchase with no subscription, according to the developer. Buy it if you check performance daily; skip it if you only open Activity Monitor when something feels wrong.