Activity Monitor is the built-in macOS utility that shows every running process and its use of CPU, memory, energy, disk and network, updated in real time, and lets the user inspect, sample or quit processes. Among macOS apps & services, it is the graphical counterpart of command-line tools such as top and ps, and it is the first place to look when a Mac becomes slow, hot, loud or short on battery.
The app lives in the Utilities folder inside Applications and opens quickly through Spotlight. It reads data provided by the kernel and system services, so it observes the system rather than changing it, except when the user explicitly quits or signals a process.
How Activity Monitor is organized
The window is divided into five main tabs, each with its own columns and a summary panel at the bottom. A sixth Cache tab appears when the Mac acts as a content caching server. The table summarizes what each tab is for.
| Tab | Key columns | Best used to find |
|---|---|---|
| CPU | % CPU, CPU time, threads, % GPU | Processes that keep the processor busy |
| Memory | Memory, compressed memory, ports | Apps that consume or leak memory |
| Energy | Energy impact, 12-hour power, App Nap | Apps that drain the battery |
| Disk | Bytes written, bytes read | Heavy writers such as indexers or backups |
| Network | Sent bytes, received bytes, packets | Unexpected uploads or downloads |
The View menu filters the list, for example to my processes, system processes or windowed apps, and All processes, hierarchically shows parent and child relationships. The Kind column on Apple silicon reveals whether an app runs natively as Apple or through Rosetta as Intel.
Reading CPU and memory figures correctly
The % CPU column is measured per core, so a process can show values above 100 percent on a multi-core Mac; 400 percent means roughly four cores fully used. The summary panel separates user and system time and shows idle capacity.
Memory is where most misreadings occur. macOS deliberately uses free RAM for file caching and compression, so a nearly full memory figure is normal. The decisive indicator is the memory pressure graph, which reflects how hard the system works to provide memory.
| Value | Meaning | When to worry |
|---|---|---|
| Memory pressure | Overall strain on available memory | Graph stays yellow or red |
| App memory | Memory used by apps and processes | One process grows without limit |
| Wired memory | Memory the kernel cannot page out | Unusually large after driver changes |
| Compressed | Memory compressed to save space | Rising together with swap |
| Cached files | Recently used files kept in RAM | Rarely a problem, freed on demand |
| Swap used | Memory written to the startup disk | Several gigabytes with red pressure |
Energy and diagnostic tools
The Energy tab ranks processes by energy impact, a relative score derived from CPU, GPU, wake-ups and other activity rather than a measurement in watts. The 12-hour power column shows average impact over time, which is more useful than a momentary spike.
For deeper analysis, the toolbar and menus offer Sample Process, which records call stacks for a few seconds, plus spindump and system diagnostics reports. These outputs are what developers and support engineers request when an app hangs.
| Action | What happens | Typical use |
|---|---|---|
| Quit | Asks the process to exit cleanly | Closing an unresponsive app politely |
| Force Quit | Terminates the process immediately | App ignores a normal quit |
| Sample Process | Captures stack traces for analysis | Diagnosing a hang or busy loop |
| Inspect | Shows open files, ports and statistics | Finding which file locks a volume |
| Run spindump | Records system-wide hang data | Support cases for freezes |
Comparison with related tools
Activity Monitor is a general-purpose observer. Other macOS tools cover narrower or more technical needs, and knowing which to choose saves time.
| Tool | Interface | Strength |
|---|---|---|
| Activity Monitor | Graphical | Quick overview and safe actions |
| Force Quit Applications window | Graphical, Option-Command-Escape | Fast exit of frozen apps only |
| top and ps | Terminal | Scriptable snapshots and remote use |
| vm_stat | Terminal | Raw virtual memory statistics |
| powermetrics | Terminal, administrator | Detailed power and thermal data |
| Instruments | Developer tool | Profiling of a specific app |
A troubleshooting routine with Activity Monitor
Experienced support staff follow a fixed order of checks so that a vague complaint such as a slow Mac turns into a specific cause. The routine takes only a few minutes and avoids random restarts that destroy evidence.
- Check memory pressure first, because sustained yellow or red pressure explains general sluggishness better than any single process.
- Sort the CPU tab by % CPU, then by CPU time, to separate momentary spikes from processes that have been busy for hours.
- Look at the Disk tab when the system stutters while CPU looks idle; heavy writes by backups or sync clients can saturate storage.
- Review the Energy tab for battery complaints, focusing on apps that prevent sleep or never enter App Nap.
- Sample a misbehaving process before quitting it, so that the cause can be reported to the developer.
Adding Activity Monitor to the Dock and enabling a CPU history icon through the Dock Icon option in the View menu gives a permanent load indicator, which helps users notice problems as they begin instead of after the Mac has slowed down.
Common mistakes
- Quitting system processes: force quitting
WindowServerlogs the user out, and killing other system daemons can destabilize macOS. - Chasing high memory use: large cached or compressed values are normal; act only on sustained memory pressure.
- Blaming kernel_task: high CPU from kernel_task is often thermal management, not a fault.
- Overlooking indexing:
mdsandmdworkerspikes after an update are temporary Spotlight indexing. - Judging by a single moment: sort by CPU time or 12-hour power to find persistent offenders.
The idea in brief
Activity Monitor is the dashboard of a Mac. It lists everything that is running and shows which programs are working the processor, filling memory or draining the battery.
When a Mac feels slow or the fan gets loud, opening Activity Monitor usually reveals the culprit in seconds. From there, the user can close the problem app safely instead of restarting the whole computer.
A practical scenario
A video editor notices that her MacBook Air with 16 GB of memory becomes sluggish every afternoon. In Activity Monitor’s Memory tab, the memory pressure graph is yellow and swap use exceeds 6 GB. Sorting by memory shows a browser helper process using over 5 GB, tied to a single tab with an embedded live dashboard.
She closes that tab, and memory pressure returns to green within a minute. To confirm, she checks the Energy tab, where the same process had the highest 12-hour power value. The fix is to open the dashboard only when needed, and the afternoon slowdowns stop without any hardware upgrade.