Long Arrow Right External Link angle-right Search Send Times Loader chevron-down thumb-up thumb-down Spinner angle-left
Go to ThreatLocker

Uninstalling the ThreatLocker MAC Agent

Turn off the Tamper Protection Feature in the ThreatLocker Portal

Disable Tamper Protection | ThreatLocker Help Center (kb.help) 

Click on the ThreatLocker icon in the tray. Select 'Quit'.

Users using MAC Agent 1.0 and above will have the app automatically removed by the uninstall command. Users using any version below 1.0 will need to manually remove the ThreatLocker app using the directions found at the bottom of this article before attempting to run the next Terminal command.

Open Terminal by clicking the icon located at the bottom of the screen.


Run the following Terminal command: 

open /Applications/ThreatLocker.app --args -uninstall 

This will delete the baseline. This is especially important if you are removing the ThreatLocker App to reinstall it.  

Lastly, you will go into the portal under the Computers tab, select the machine, and select the delete button.


Directions for Manually Removing the ThreatLocker App for MAC Agent Versions Below 1.0

Drag the ThreatLocker App icon from the Applications folder into the bin.  


You will receive a message informing you that the ThreatLocker app is hosting system extensions. Click 'Continue' on the popup. 


If prompted, input your username and password and click 'OK'.


You need to ensure that all baseline remnants have been removed.

Open Terminal by clicking the icon located at the bottom of the screen.

Input: sudo defaults read com.threatlocker.app.agent  

This will check to see if the baseline is present. This can also be useful if you wanted to check to see if the baseline is complete without logging into the ThreatLocker Portal. 

Did this answer your question?
Thanks so much for your feedback!
%s of people found this helpful.