Question 1

What is TrashPanda and how does it work?

Accepted Answer

TrashPanda is a macOS system cleaner that reclaims storage by safely removing caches, logs, and other temporary data that piles up over time: the stuff macOS lumps under "System Data". It ships with 119 built-in cleanup categories across three priority levels, plus a set of dedicated tools: scanners for large files and downloads, a Disk Visualizer, a duplicate finder, a developer-cache sweeper, an app uninstaller, a secure shredder, and, new in v4.0, Watchtower: a read-only security auditor. Nothing is deleted without your say-so. Every destructive action can be previewed with a dry run first, and most tools stage their results in the Collector so you review one batch before approving it. Common cleanup targets: User and system caches, logs, and temporary files Developer tool caches (Xcode, npm, pip, Docker, Homebrew) Browser caches and stale downloads iOS backups and Simulator data Duplicate files and forgotten large files

Question 2

What are the system requirements?

Accepted Answer

TrashPanda 4.0 requires macOS 14 (Sonoma) or later and runs natively on both Apple Silicon and Intel Macs. Earlier releases supported macOS 13; v4.0 raised the minimum. You will also want to grant Full Disk Access. TrashPanda runs without it, but it can only clean what it is allowed to see, and Watchtower’s privacy inventory needs it to read the TCC database.

Question 3

Does TrashPanda work on the latest macOS?

Accepted Answer

Yes. TrashPanda 4.0 supports macOS 14 (Sonoma) and everything newer, including macOS 26. The app is tested against current macOS releases each cycle, and v4.0 added cleanup categories for newer system components such as Apple Intelligence caches and macOS 26 containers.

Question 4

What’s new in TrashPanda 4.0 (Anniversary Edition)?

Accepted Answer

v4.0 is the Anniversary Edition. The headline addition is Watchtower , plus a rebuilt interface and a new Downloads scanner. Watchtower : a strictly read-only macOS configuration auditor. Five sections: Persistence Audit, System Hygiene, Privacy Permissions, Lookout (network configuration), and Den Inventory (browser extensions). It never changes anything on your Mac. Downloads Detox : a scanner that sorts ~/Downloads into plain-English buckets: installers whose app you already have, archives you already extracted, broken partial downloads, screenshots, and old untouched files. Redesigned interface : the sidebar is gone. The home screen is now a set of cards, one per tool, each with its own identity color so you always know which tool you are in. "Don’t show again" approvals : hide a Watchtower finding you have reviewed. If the underlying item later changes, it comes back automatically. Progressive scanning : Watchtower sections appear as they finish rather than making you wait for the whole scan. macOS 14 or later is now required. All updates remain free for existing customers. Your one-time purchase still includes lifetime updates.

Question 5

What was added in TrashPanda 3.0?

Accepted Answer

v3.0 (April 2026) was the release that turned TrashPanda from a category cleaner into a toolkit. Everything below is still in the app: Disk Visualizer : interactive sunburst of disk usage, fast on 2 TB+ volumes Tune-Up Toolkit : one-click maintenance (flush DNS, free memory, rebuild Launch Services) Eviction Notice : uninstaller that finds the files an app leaves behind Doppelgänger Hunt : duplicate finder using size + SHA-256 Burrow Sweep : project-aware developer cache walker Shred : secure file overwrite and external-drive wipe Collector tray : stage items from any tool, review once, then delete Command Palette (⌘K) : keyboard-first navigation For the current release, see What’s new in TrashPanda 4.0 .

Question 6

How much storage space can I expect to free up?

Accepted Answer

Most users recover somewhere between 10 GB and 100 GB. Developers and heavy users often see 50 GB+; typical users usually land in the 20–40 GB range. Rather than trusting that estimate, run a dry run. It reports exactly how much each selected category would free on your Mac before anything is deleted.

Question 7

What is Easy Mode vs Custom Mode?

Accepted Answer

Easy Mode is the one-click path. It preselects the highly recommended categories, always previews with a dry run first, and requires no decisions: the right starting point if you are new to the app. Custom Mode gives you the full list. Select individual categories across all three priority levels, see live size estimates per category, toggle dry run and Move-to-Trash, and save the combination as a reusable Patrol.

Question 8

What does the dry-run preview actually show?

Accepted Answer

A dry run executes nothing. It reports every path and command that would run, along with the estimated space each would free. That means you can read the exact operations before approving them, and if you would rather run something yourself in Terminal, you can copy the command straight out of the preview.

Question 9

What do the priority levels mean?

Accepted Answer

TrashPanda’s 119 built-in categories are sorted into three color-coded levels: 🟢 Highly Recommended : safe for everyone. User caches, system logs, temp files, and similar low-risk items. 🔵 Optional : generally safe, but may reset something you care about. Developer tool caches, browser data, media and messaging app caches. Read the description before selecting. 🔴 Advanced : needs system knowledge. Kernel extensions, VM and APFS snapshots, deep diagnostics. Use with caution. Start with Highly Recommended and work upward as you get familiar with the tool.

Question 10

How does the Disk Visualizer work?

Accepted Answer

The Disk Visualizer is an interactive sunburst chart of your disk usage. It scans drives at 2 TB+ in seconds by walking the file system in parallel and aggregating sizes per directory. How to use it: Open the Disk Visualizer tab Pick a starting directory (defaults to your home folder) Click any arc to drill in; the parent path stays visible at the center Right-click any item to add it to the Collector tray for review and cleanup The Visualizer never deletes anything itself - it routes selected items into the Collector, where you preview the dry-run before approving.

Question 11

What is the Command Palette (⌘K)?

Accepted Answer

Press ⌘K anywhere in TrashPanda to open the Command Palette - a keyboard-first launcher for every action in the app. Use it to: Jump to any tab (Easy Mode, Custom, Junkyard, Disk Visualizer, Shred, etc.) Run a saved patrol by name Open a specific scanner Trigger Tune-Up Toolkit tasks Search categories by name or alias The palette uses fuzzy search and respects your full keyboard control - no mouse required.

Question 12

What is the Collector tray?

Accepted Answer

The Collector is a staging area shared across every scanner and tool in TrashPanda. Instead of deleting from each scanner separately, you add items to the Collector and review the entire batch before approving. Workflow: Run any scanner (Disk Visualizer, Doppelgänger Hunt, Burrow Sweep, etc.) Add candidates to the Collector with one click Open the Collector tray to see total size, file count, and per-source breakdown Review the dry-run preview, then approve or remove items The Collector button pulses in high contrast when items are staged, so you never forget you have a pending cleanup.

Question 13

What is Downloads Detox?

Accepted Answer

Downloads Detox is a v4.0 scanner that reads ~/Downloads and sorts it into buckets that actually mean something, instead of just listing files by size: Already installed : a .dmg , .pkg , or .iso whose app is already sitting in your Applications folder Already extracted : an archive with a matching folder next to it Broken download : .crdownload , .part , and other half-finished files Screenshots : files still carrying macOS’s default screenshot naming Old and untouched : not opened in over 90 days and at least 1 MB Recent files are left alone, and nothing is deleted directly. Your selections stage into the Collector for review first.

Question 14

How does Doppelgänger Hunt avoid false positives?

Accepted Answer

Doppelgänger Hunt is a content-hash duplicate finder. It avoids false positives by combining two checks: Size grouping: files are grouped by exact byte size first. Anything unique in size is dismissed immediately. SHA-256 verification: for each size group with two or more files, TrashPanda computes a SHA-256 hash and confirms byte-for-byte identity. Same-named files are never assumed to be duplicates. Different photos with identical filenames are correctly treated as different files. Only true content matches are surfaced for review.

Question 15

What does Burrow Sweep do for developers?

Accepted Answer

Burrow Sweep is a project-aware developer cache walker. Instead of cleaning every node_modules on your disk indiscriminately, it groups caches by project root so you can review which projects are actively in use and which are stale. What it finds, grouped per project: node_modules (Node, npm, pnpm, Bun, Deno) target/ (Rust) .gradle/ (Android, JVM) Pods/ (CocoaPods) DerivedData/ (Xcode) __pycache__/ and .venv/ (Python, uv, Poetry) vendor/ (Composer, Go modules) Each project shows a stale-day age (days since the project root was last modified) so you can confidently sweep stale projects without breaking active ones.

Question 16

How is Eviction Notice different from dragging an app to the Trash?

Accepted Answer

Dragging an app to the Trash deletes the .app bundle. It does not touch the support files, caches, preferences, login items, and helpers that the app installed across your home folder. Eviction Notice scans 12 ~/Library locations for everything an app left behind: ~/Library/Application Support/ ~/Library/Caches/ ~/Library/Preferences/ ~/Library/Saved Application State/ ~/Library/Containers/ and ~/Library/Group Containers/ ~/Library/LaunchAgents/ ~/Library/Logs/ ~/Library/HTTPStorages/ and ~/Library/WebKit/ ~/Library/Cookies/ ~/Library/PrivateFrameworks/ (per app) You see the full list, approve it, and Eviction Notice cleans through the Collector - same dry-run safety as the rest of TrashPanda.

Question 17

What is the Shred tab and is it safe?

Accepted Answer

The Shred tab securely overwrites files or fully wipes external drives so the data cannot be recovered with forensic tools. Two modes: File shred: overwrites the file's contents before deletion (single-pass random write - sufficient for SSDs, where multi-pass overwrites are not effective and can wear the drive). Drive wipe: for external drives only. Multi-pass overwrite of the entire volume. Safety guards: Drive wipe is only ever permitted on external drives - TrashPanda will refuse to wipe the boot volume or any system disk. You must confirm the operation by typing the drive name. Apple Silicon SSDs are protected by hardware encryption - for internal SSDs, secure erase is achieved by destroying the encryption key, not by overwriting. WARNING: Shredding is irreversible. There is no undo. Always verify your selection before confirming.

Question 18

What scanners are available?

Accepted Answer

The Scanners tab holds seven targeted scanners: Large Files : anything over a size threshold you set (100 MB by default) Cache Folders : application cache directories, ranked by size Downloads Detox : sorts ~/Downloads into plain-English buckets (new in v4.0) Steam Games : installed Steam titles with individual sizes Game Bottles : Windows game bottles from CrossOver, Whisky, and Heroic AI Models : local model files from Claude Desktop, ChatGPT, Cursor, Windsurf, Zed, MLX, WhisperKit, and others Orphaned Apps : leftovers from applications that are no longer installed Every scanner respects the Guard system and stages selections into the Collector rather than deleting on the spot.

Question 19

What are Saved Patrols and the Junkyard tab?

Accepted Answer

A Patrol is a reusable cleanup workflow: a named set of categories you can re-run without reconfiguring anything. Build a selection in Custom Mode, click "Save as Patrol", and name it (for example "Weekly Cleanup" or "Developer Purge"). The Junkyard tab is where your saved patrols live. From there you can run, edit, import, or export them, and any patrol can be attached to a schedule so it runs automatically.

Question 20

Can TrashPanda run cleanups automatically on a schedule?

Accepted Answer

Yes, natively: no scripting required. Scheduling is built into the GUI and backed by macOS launchd. Open Maintenance → Schedules and click "Create New Schedule" Choose a frequency: daily, weekly, monthly, or a custom interval Pick the categories or the saved Patrol you want it to run Review execution history and per-run logs from the same screen You can get a notification when a scheduled run finishes. If a scheduled run happens without admin privileges, admin-only categories are skipped automatically and the skip is written to the log rather than failing the run.

Question 21

Can I backup and restore my settings?

Accepted Answer

Yes! TrashPanda includes comprehensive backup and restore functionality. What gets backed up: Custom categories Saved patrols Guard protected paths Application settings and preferences Access from: Maintenance Menu → Backup/Restore Timestamped backups are saved to Application Support, and you can restore any previous configuration with one click.

Question 22

Can TrashPanda clean external drives?

Accepted Answer

Yes. TrashPanda works on both internal and external drives, giving you flexibility to manage space across all your storage devices.

Question 23

What is Watchtower?

Accepted Answer

Watchtower is TrashPanda 4.0’s headline feature: a point-in-time, read-only macOS configuration auditor . It shows you what auto-runs on your Mac, how your security settings are configured, which apps hold sensitive privacy permissions, how your network is configured, and what is installed in your browsers. The point is visibility. Watchtower gathers evidence and explains it. It does not act on your behalf, and it does not decide what is malicious. It is bundled with TrashPanda at no extra cost. Open it from the Watchtower card on the home screen, or press ⌘K and type "Watchtower".

Question 24

Does Watchtower change anything on my Mac?

Accepted Answer

No. Never. This is an architectural guarantee , not a policy we promise to follow. The Watchtower module contains no file-deletion calls, no move-to-Trash calls, and no destructive system commands. A lint script ( verify-watchtower-readonly.sh ) runs against the codebase and fails the build if any such call is ever introduced. The only files Watchtower writes are its own settings inside TrashPanda’s Application Support folder, never system data. Practically, this means Watchtower will tell you that Remote Login is enabled or that an unsigned binary auto-runs at login, and then hand you a button that opens the relevant System Settings pane. You make the change, in Apple’s own UI. Watchtower will not flip a setting, disable a launch agent, or remove a browser extension for you.

Question 25

What does Watchtower actually check?

Accepted Answer

Five sections, each its own audit: Persistence Audit : everything that auto-runs: LaunchAgents and LaunchDaemons (yours and system-wide), the macOS Login Items registry, configuration profiles, cron, and login hooks. Each item is captured with its program path, code-signing details (Apple-signed, Developer ID, ad-hoc, unsigned, or unreadable), Team ID, Gatekeeper status, and a cross-reference against Apple’s XProtect data. System Hygiene : a read-only look at 16 security settings: SIP, Gatekeeper, FileVault, the firewall (plus stealth and block-all modes), Remote Login, Remote Management, Screen Sharing, automatic login, the guest account, automatic updates, /etc/hosts , DNS, proxies, and Lockdown Mode. Each row shows the current state, the recommended state, why it matters, and a link to the right System Settings pane. Privacy Permissions : which apps hold Full Disk Access, Accessibility, Screen Recording, Input Monitoring, Camera, Microphone, Automation, and folder access. Risky combinations get highlighted: for example Accessibility plus Input Monitoring on a non-Apple-signed binary, which is the shape of a keylogger. Lookout : network configuration: DNS resolvers, /etc/hosts overrides, system proxies, configuration profiles, custom root certificates in the system keychain, and VPN configurations. Den Inventory : browser extensions across Safari, Chrome, Edge, Brave, Arc, and Firefox, with each one’s declared permissions, version, and install date. Extensions that request access to every site, use native messaging, or have gone a year without an update are flagged. Sections appear as they finish rather than all at once, so you can start reading Persistence while Privacy is still scanning.

Question 26

Is Watchtower antivirus? Will it find malware?

Accepted Answer

No, and please do not use it as one. Watchtower is not antivirus and is not a replacement for one. It does not detect zero-day malware. It does not run in real time or in the background. Every scan is a snapshot of that moment. If something installs a launch agent right after you scan, you will not see it until the next scan. It does not perform behavioural analysis. It reads configuration; it never runs a binary or watches what one does. Findings are evidence, not verdicts. A red finding means one or more rules matched a pattern worth a closer look, not that you are infected.

Question 27

Watchtower flagged something. Should I be worried?

Accepted Answer

Probably not, and false positives are expected by design . Watchtower’s rules match patterns; they have no ground truth about which developers are trustworthy. Common innocent causes: You are a developer with unsigned tools in /usr/local/bin that auto-run You use an app from a small developer whose Team ID is not widely known You have a corporate VPN, a dev proxy, or an MDM-managed Mac A game launcher or creative app installed its own local helper certificate: Battle.net, Adobe, Steam, and Spotify all do this How to triage a finding: Open the detail sheet. It lists every rule that fired and the exact value that matched. There is no hidden score. Use "Reveal in Finder" to see what the program actually is. Usually it is obviously part of an app you installed. Search the Team ID or bundle ID. Real revocations and malware families are well documented publicly. If you still want to remove something, do it through macOS’s own tools: System Settings, or the browser’s extension page. Watchtower cannot do it for you. There is also an optional extra flags list: import your own Team IDs or bundle IDs you personally want flagged. Those always show as amber "unusual", never red, and are labelled as your call rather than Apple’s.

Question 28

What are "stale" privacy grants?

Accepted Answer

A stale grant is a permission still listed for an app that is no longer on your disk . macOS does not clean up its privacy database when you delete an app, so entries accumulate for years: old versions, trial apps, things you uninstalled long ago. Watchtower puts these in their own subsection with an orange STALE chip, because they are usually the most actionable thing in the list and they are easy to miss in System Settings. macOS often hides entries whose app it can no longer resolve. They are clutter, not an active risk. A stale grant cannot be used by anyone unless an app with that exact bundle identifier is installed again. Watchtower is deliberately honest about the cleanup options too: it links you to the right System Settings pane, and explains plainly why removing a single stale entry is harder than it should be, rather than recommending a blunt command that would also wipe the permissions you actually rely on.

Question 29

Why does Watchtower need Full Disk Access?

Accepted Answer

One section needs it: Privacy Permissions . The list of which apps hold Camera, Microphone, Screen Recording, and similar grants lives in a database called TCC.db, and macOS gates read access to it behind Full Disk Access. Watchtower opens that database with sqlite3 in read-only mode . It never writes to it. If Full Disk Access is not granted, Watchtower says so plainly rather than showing an empty list and letting you assume everything is fine. The same honesty applies elsewhere: a file it cannot read is reported as unreadable, not silently treated as unsigned or absent. Some system-level permission entries live in a second, SIP-protected database that nothing can read. Watchtower states that limitation instead of pretending to have the full picture.

Question 30

Does Watchtower send anything over the internet?

Accepted Answer

No. Watchtower contains no network code at all. It cannot phone home, because there is nothing in it that could. The malware-signature cross-reference works entirely offline. macOS already ships Apple’s XProtect data on your disk, and Watchtower reads that local file to check whether a signing identity or bundle ID appears on Apple’s blocklist. No lookup service, no reputation API, no uploading of hashes. Exports are the same: plain text, JSON, or a sanitized JSON that strips your username and home path so you can safely paste it into a forum. All three go through the standard macOS save panel, to a location you pick. Nothing is uploaded.

Question 31

Can I hide findings I have already reviewed?

Accepted Answer

Yes: that is what "Don’t show again" does. Once you have looked into a finding and decided it is fine, approve it and it moves into a collapsed "Previously approved" section at the bottom of that tab. You can move it back to the active list at any time. The important part: approval is tied to the item as it was when you approved it. Watchtower records a fingerprint of the security-relevant details. For a launch agent that means the program path, signing kind, Team ID, and identifier; for a browser extension, the version, permissions, and enabled state. If any of that changes, the approval no longer applies. The finding reappears in your active list with an orange "Changed since reviewed" chip, so an extension that quietly adds new permissions in an update cannot hide behind an approval you granted months earlier. System Hygiene is deliberately excluded from approvals: those rows report known system settings rather than findings about unknown items, so there is nothing to dismiss.

Question 32

Is TrashPanda safe to use?

Accepted Answer

That is the design goal. The safeguards, in the order you meet them: Dry-run preview : see every path and command before anything runs The Collector : scanners stage results for review instead of deleting immediately Move to Trash : an optional mode that routes deletions to the Trash where the operation supports it, so you can fish something back out Color-coded priority levels : you always know how risky a category is before selecting it The Guard system : mark directories as protected and every tool skips them Signed and notarized : built in Swift, signed with an Apple Developer ID, notarized by Apple Fully offline : no telemetry, no tracking, nothing leaves your Mac That said: cleanup is deletion, and you assume the risk. Review the dry run and only select categories you understand.

Question 33

Does TrashPanda work offline? Is there any telemetry?

Accepted Answer

TrashPanda is 100% offline . There is no network stack in the app. No telemetry : no analytics, no crash reporting, no usage data No phone-home : no licence check-in, no reputation lookups No auto-update : a deliberate tradeoff. An updater would need network access, which would break the guarantee above. You update by downloading a new version when you choose to. Nothing to leak : TrashPanda has no idea what files you have or what you cleaned, because that never leaves your machine Watchtower follows the same rule: its malware cross-reference reads Apple’s XProtect data from your local disk rather than querying a service.

Question 34

Why does TrashPanda recommend Full Disk Access?

Accepted Answer

Full Disk Access lets TrashPanda reach the protected directories where macOS keeps system caches, logs, and temporary files, which is exactly where the "System Data" bloat lives. Without it, those stay invisible and uncleaned. The permission is used only to scan and delete files. TrashPanda never reads document contents, and since it has no network stack, it could not transmit anything even if it did. It is optional. Deny it and TrashPanda still runs. It just cleans less, and Watchtower’s privacy inventory will report that it cannot read the TCC database rather than showing a misleadingly empty list.

Question 35

What is the Guard system?

Accepted Answer

The Guard system protects critical directories from accidental deletion during cleanup operations. How it works: Add any directory to your protected paths list Protected paths are immune to all cleanup operations Scanner results automatically exclude guarded files Manage protected paths from Maintenance Menu → Protected Paths Default protected paths include: User Documents folder User Desktop folder Applications folder System directories (always protected by design)

Question 36

Can TrashPanda delete my personal documents or photos?

Accepted Answer

Not on its own. Categories target caches, logs, and temporary files, not your documents. Nothing runs until you explicitly select it and approve the run. Two caveats worth knowing. The Large Files scanner and the Disk Visualizer can reach anywhere you point them, including Documents and Desktop. That is their purpose, so read what you are selecting. And you can add any folder to the Guard list to make every tool skip it permanently.

Question 37

Is there an undo? What if an app needs a cache I deleted?

Accepted Answer

There is no rollback. Once a permanent delete completes, it is gone. This is why the dry run exists: review it before confirming. Two things soften this. Turn on Move to Trash and supported deletions go to the Trash instead of being removed outright, so you can recover them until you empty it. And the Collector holds staged items until you approve the batch, giving you a second look before anything happens. As for caches: that is what caches are for. Xcode, Docker, browsers, and every app tested rebuild theirs automatically on next launch. Expect a slower first launch afterward, not a failure.

Question 38

Why is TrashPanda safer than other Mac cleaners?

Accepted Answer

Mac cleaners have earned a bad reputation: upsells, scare tactics, subscriptions, and vague claims about what they are removing. TrashPanda is built as the opposite: Transparent : the dry run shows the literal commands. Nothing is hidden behind a "Clean" button. Signed and notarized : Apple Developer ID signed and notarized. Several competitors ship unsigned and ask you to bypass Gatekeeper. No dark patterns : no subscription, no fake "urgent problems found" counter, no upsell screens. One purchase. Private : fully offline, zero telemetry. You are in control : nothing is selected or cleaned without your explicit action. No hidden processes, no tricks, no phoning home.

Question 39

Why are there no testimonials, reviews, or star ratings on this site?

Accepted Answer

Most people know by now that reviews, stars, and testimonials can be faked or manipulated. We do not believe that manufactured "social proof" provides real trust. Instead, TrashPanda focuses on what matters: Clear explanation of what the app does Apple-signed and notarized software A dry-run preview that lets you verify results before cleaning Real trust comes from transparency, technical audits, and your own experience using the tool - not stars on a page.

Question 40

Why didn't I get a license key?

Accepted Answer

TrashPanda uses email addresses to validate licenses, so there is no need to remember or find a code. Your license is directly attributed to the email address you used at checkout. You can always use your email address to redownload the program.

Question 41

I need a receipt / invoice?

Accepted Answer

You can use the customer portal to see your purchase and download receipts. Note that the business name for TrashPanda is GlacialEscape LLC .

Question 42

Will TrashPanda ever be available on the Mac App Store?

Accepted Answer

Here is the interesting thing - I went through the whole process to put TrashPanda on the Mac App Store, and it is not allowed by the nature of how permissions work. Apple terms of service do not allow the disk access needed to actually clean your Mac effectively. App Store apps can only run in sandbox mode with very limited permissions to specific folders, which means: Limited Effectiveness: Apps claiming to do system cleaning cannot access what they need to clean No System Data Access: The biggest storage consumers remain untouched This means two things: The tools out there cannot clean the way we need them to I would rather have a tool that is signed and fully functional than reduce capabilities just to be on the App Store This is why enterprise services like Jamf and Mosyle use Apple-signed download products instead of App Store apps to deploy across organizations - they need non-sandboxed apps that can actually interact with the underlying OS.

Question 43

Who built TrashPanda and why are they qualified?

Accepted Answer

I built TrashPanda as a seasoned IT professional and developer with decades of hands-on experience in MacOS, enterprise IT, and systems administration Early Mac Experience: I started using Apple computers in 1984 with the Apple IIe. Over the years I have coded in Applescript, Swift, and many other languages across all platforms Professional IT Background: I studied Computer Science and worked as a support technician, systems administrator, and eventually CTO managing over 10,000 devices across more than 30 sites. I implemented enterprise policies, endpoint protection, and large-scale device management solutions Enterprise Mac Management: I have extensive experience with MDM solutions such as Jamf and Mosyle, handling full deployment planning, custom scripting, path setup, and scheduling silent commands for thousands of devices Security Expertise: I conducted cybersecurity audits, penetration testing, and code analysis while implementing safeguards for both internal and enterprise systems. I have deep knowledge of network topologies, system vulnerabilities, and data protection practices Developer Tools and Systems Knowledge: I built numerous internal tools, scripts, and automation solutions for personal and client use. I understand macOS file structures, cache systems, APFS snapshots, developer tool caches, and temporary system data Motivation: I created TrashPanda to solve a constant personal and client pain point, reclaiming storage space safely and efficiently. I found existing tools incomplete, unsafe, or privacy-invasive, so I built a lightweight and privacy-first solution Hands-On Coding Across Platforms: In addition to macOS, I have experience with Unix, Windows, Python backends, React frontends, database management, and automation scripting, giving me a broad perspective on system optimization and safe data management Continuous Learning: I keep up with platform updates, new macOS features, security patches, and evolving enterprise needs through blogs, developer communities, and hands-on experimentation User-Focused Approach: I combine technical knowledge with empathy for users who may have limited macOS experience. I design features to be safe, transparent, and auditable, giving users full control over what is cleaned Unique Perspective: I use smaller drives personally, which keeps me honest about what I clean and what I store. I balance aggressive system cleanup with safety, ensuring caches and temporary files are removed without risking critical data or app stability In short, I built TrashPanda based on decades of experience, enterprise deployment expertise, security knowledge, and a user-first mindset. My goal is to provide a tool that is safe, effective, and trustworthy for both individuals and enterprise environments.

Question 44

What programming language is TrashPanda built with?

Accepted Answer

TrashPanda is built entirely in Swift with no external libraries, aside from the Swift Argument Parser used for its command-line interface.

Question 45

Can I use TrashPanda CLI in my own scripts?

Accepted Answer

Yes! TrashPanda CLI has comprehensive automation capabilities perfect for scripting and MDM deployment. Available commands: trashpanda clean - Perform cleanup operations trashpanda list - Display available categories trashpanda scan - Analyze disk space without cleaning trashpanda aliases - Show category aliases and groups Category selection keywords: recommended - 17 highly recommended categories optional - 84 optional categories (including 15 new 2026 categories) advanced - 18 advanced categories cache or dev - Category groups Individual category names or aliases Example usage: # Safe preview of recommended cleanup trashpanda clean --dry-run # Silent cleanup for automation trashpanda clean -c recommended --silent --force # Development environment cleanup trashpanda clean -c "xcode,node,python" --force # JSON output for scripting trashpanda list --format json

Question 46

What file systems are supported?

Accepted Answer

TrashPanda works with all modern macOS file systems: APFS (Recommended): Fully supported - the default file system for macOS 10.13+. Optimal performance and snapshot support. HFS+ (Legacy): Fully supported - older Macs and Time Machine backups still use HFS+. External Drives: Works on both internal and external volumes regardless of file system. Note: Network volumes are not recommended as they may cause permission or performance issues.

Question 47

Does TrashPanda support multiple user accounts on the same Mac?

Accepted Answer

Yes. TrashPanda works system-wide but some components are stored in the user directory (total cleaned, saved patrols, guarded paths and schedules).

Question 48

Why won’t it let me clean categories marked ADMIN?

Accepted Answer

Some categories in TrashPanda are specially protected because they require elevated privileges. These categories should generally not be cleaned unless you fully understand what they do. Apple uses multiple layers of protection, therefore some deletions may pass without admin rights, some require full disk access, and others require the additional steps below. In many cases TrashPanda will partially clean the folders that do not require full administrator rights If you want to run a complete cleanup you will need to open the application from the terminal with administrator privileges sudo open /Applications/TrashPanda.app The system will prompt you for your administrator password. WARNING: This option is intended only for advanced users. While easy and optional categories are generally safe and unlikely to damage your system, advanced functions run in administrator mode can cause serious issues or even break macOS if misused.

Question 49

How does TrashPanda handle very large caches like Xcode or Docker?

Accepted Answer

It removes them directly rather than trying to prune them selectively. Partial cache surgery is where other cleaners break things. Xcode, Docker, and the rest rebuild what they need on next use. Expect a slower first build or first launch afterward; you should not see failures or instability.

Question 50

What makes TrashPanda useful for developers?

Accepted Answer

Developer toolchains are usually the single largest source of reclaimable space on a working Mac. TrashPanda targets them specifically: Burrow Sweep : walks your home folder for node_modules , target/ , .gradle/ , Pods/ , DerivedData/ , __pycache__/ , vendor/ and more, then groups them by project with a staleness age so you can clear dead projects without touching active ones Toolchain cache categories : Xcode, npm, pnpm, Bun, Deno, pip, uv, Poetry, Homebrew, Docker, Podman, Gradle, CocoaPods iOS Simulator and Xcode data : unavailable simulators, DerivedData, archives, previews AI Models scanner : local model weights from Claude Desktop, ChatGPT, Cursor, Windsurf, Zed, MLX, and WhisperKit, which run to tens of gigabytes The CLI : scriptable, with --dry-run , --silent , and --force flags for automation TrashPanda does not integrate with these tools or wrap their commands. It cleans their caches and leaves the tools themselves untouched. There are no fixed developer presets either; select the categories you want and save the combination as a Patrol.

Question 51

Can IT admins deploy TrashPanda across a fleet? Does it work with Jamf or Mosyle?

Accepted Answer

Yes, through standard custom scripting: the same way you would deploy any non-App-Store tool. There is no dedicated MDM plugin. Deploy the DMG or PKG through your MDM as you would any package Symlink the CLI: sudo ln -sf "/Applications/TrashPanda.app/Contents/MacOS/TrashPanda" /usr/local/bin/trashpanda Run silent cleanups as a policy or custom script: trashpanda clean -c recommended --silent --force Schedule it on whatever cadence your MDM supports This works with Jamf, Mosyle, Kandji, and anything else that can run a shell script. Because TrashPanda is fully offline, there is no licence server to reach and no per-device activation call.

Question 52

Why choose TrashPanda over other Mac cleaners?

Accepted Answer

Short version: more coverage, more transparency, and a one-time price. 119 cleanup categories : most competitors cover five to ten. TrashPanda targets developer toolchains, gaming platforms, AI model caches, and 2026-era system components that other cleaners have not caught up to. A toolkit, not one button : Disk Visualizer, duplicate finder, uninstaller, developer-cache sweeper, secure shredder, and Watchtower, in one app. Watchtower : no other cleaner ships a read-only security auditor. Genuinely offline : no telemetry, no account, no licence server. Enterprise-ready CLI : silent deployment across a fleet from one script. One-time purchase : no subscription, and updates are free for life.

Frequently Asked Questions