需要什么帮助？

如何安装iKnowMyMac？#

下载磁盘映像并打开，将iKnowMyMac拖到“应用程序”文件夹中，然后从“应用程序”中打开它。

1. Get the download from the page you see right after buying, or from Get your download link with the license key from your purchase email. The download is about 4 MB.
2. Open the downloaded .dmg file.
3. Drag iKnowMyMac onto the Applications folder in the window that appears.
4. Eject the disk image, then open iKnowMyMac from your Applications folder.

iKnowMyMac is signed with our Developer ID and notarized by Apple, so macOS opens it after its usual check for apps downloaded from the internet.

第一次打开时会发生什么？#

一个简短的设置过程：几个欢迎屏幕、选择菜单栏项目的外观、可选的提醒、可选的辅助程序，最后是你的许可证密钥。

Every step that involves a permission is optional and only asks when you press its button. You can change all of these choices later in Settings.

它能在Intel Mac上运行吗？#

不能。iKnowMyMac需要搭载Apple silicon（M1或更新）的Mac，以及macOS 15 Sequoia或更高版本。

为什么iKnowMyMac不在Mac App Store上？#

App Store的沙盒会阻止App读取其他进程，而这正是iKnowMyMac的核心功能。所以我们直接销售它，并经过签名和公证。

如何激活iKnowMyMac？#

将购买邮件中的许可证密钥粘贴到激活屏幕中，然后选择“激活这台Mac”。

Your key is emailed by Dodo Payments, who handle our checkout. Copying and pasting is easiest; spaces and line breaks picked up from the email are removed for you. Until a key is activated, the app shows a live preview with simulated figures behind the activation screen.

To activate later, or with a different key, open Settings→ 然后 License.

激活会发送什么？#

你的许可证密钥和你的Mac的名称。关于你运行的App或你如何使用Mac的任何信息都不会离开你的Mac。

The license server replies with a random instance ID for this Mac. iKnowMyMac keeps the key and that ID in your Keychain, and later checks send only the key and the instance ID. The Mac's name is the one set in System Settings→ 然后 General→ 然后 Sharing; it helps you recognise your Macs if you ever move a license.

The app checks the license when it opens and then every 7 days. If it can't reach the server, everything keeps working for 30 days. Every request the app makes is listed on the privacy page.

我的密钥不被接受。怎么办？#

密钥栏下方的信息会说明原因。最常见的情况是密钥没有复制完整，或者它已在其涵盖的所有Mac上激活。

• “That key wasn't recognised.” Copy the key again from your purchase email and paste it.
• “This key is already active on all the Macs it covers.” Free a seat in the customer portal linked from your purchase email (Deactivate next to a Mac you no longer use, or this Mac's old entry), then try again.
• “This key has been deactivated.” This usually follows a refund. If you didn't ask for one, write to support@iknowmymac.com.
• “You appear to be offline.” Activation needs a moment online. Connect and try again.

我购买了适用于多台Mac的许可证。如何使用？#

在每台Mac上激活同一个密钥。适用于5台Mac的密钥可以同时在5台Mac上激活。

我找不到我的许可证密钥。#

在你的邮箱中搜索来自Dodo Payments的收据，密钥就在其中。如果仍然找不到，请用你购买时使用的电子邮件地址写信给我们。

为什么iKnowMyMac请求发送通知？#

用于App异常时的提醒和每周摘要。只有当你在设置过程中选择“允许通知”时，macOS才会询问。

If you skip it or say no, monitoring works exactly the same; you just won't get alerts. You can change your mind in System Settings→ 然后 Notifications→ 然后 iKnowMyMac, and choose which alerts fire in iKnowMyMac Settings→ 然后 Alerts.

它需要完全磁盘访问权限、麦克风或其他权限吗？#

不需要完全磁盘访问权限、录屏或麦克风权限。少数功能会在你第一次使用时请求一项权限，并且只用于该功能：Tidy请求访问你的“桌面”“下载”和“文稿”文件夹，浏览器标签页请求从你的浏览器读取标签页名称，各App音量请求音频权限，Wi-Fi名称请求定位权限，App Inspector、你的其他Mac和互联网检查请求本地网络权限，Keep Awake的“离开期间”选项请求辅助功能权限（在macOS 27中称为“设备控制和数据访问”）。

The only other approvals are for the optional helper, the optional network filter for Traffic, and Open at login if you turn it on; all of them appear in macOS's Login Items settings.

如何打开Traffic的网络过滤器？#

这是可选的。在iKnowMyMac中，点按Traffic设置中的“打开‘系统设置’”（或“设置”→“Traffic”中的“打开…”），然后在“系统设置”的“网络扩展”下打开iKnowMyMac。

The network filter gives Traffic real host names, and the data amounts of system processes. It only watches: it always lets traffic through.

1. In iKnowMyMac, click Open System Settings in step 2 of Traffic's setup, or Turn On… in Settings→ 然后 Traffic. System Settings opens at General→ 然后 Login Items (called Login Items & Extensions before macOS 27).
2. Scroll down to Extensions. If you see By App and By Category, click By Category.
3. Click the ⓘ button next to Network Extensions.
4. Turn on iKnowMyMac (it says iKnowMyMac Traffic under its name), enter your Mac's password if asked, then click Done.
5. If macOS asks whether iKnowMyMac may filter network content, click Allow.
6. Back in iKnowMyMac, Traffic switches to real host names by itself.

iKnowMyMac only appears under Network Extensions after you click the button in step 1. Turning the filter on or off briefly drops open connections, such as SSH sessions, downloads and calls.

如何再次关闭网络过滤器？#

在iKnowMyMac中，打开“设置”→“Traffic”，然后点按“网络过滤器”旁边的“关闭…”。Traffic会继续记录，但主机名是猜测的。

You can also turn off iKnowMyMac in System Settings→ 然后 General→ 然后 Login Items→ 然后 Extensions→ 然后 Network Extensions. macOS asks for your password, and may list the filter as waiting to be removed until your Mac restarts. You can turn it on again at any time.

辅助程序能做什么？#

它回答四个只读问题，而且只为iKnowMyMac回答。

• Read CPU, memory and disk use of system processes that apps can't read on their own.
• Take a powermetrics snapshot for per-process energy.
• Read the sleep and wake log (pmset).
• Read your SSD's health (SMART) data.

辅助程序不能做什么？#

它不能接收命令、不能更改任何内容，也不能使用网络。

• It can't quit, change, move or delete anything, and it can't run commands for you or for any other app.
• It can't open your files or documents.
• It can't use the network, so it can't send anything anywhere.
• It doesn't keep running: it quits a few seconds after iKnowMyMac stops asking it questions.

如何安装并批准辅助程序？#

在设置过程中选择“安装辅助程序”，或在“设置”→“辅助程序”中选择“安装…”，然后在“系统设置”→“通用”→“登录项”中允许iKnowMyMac。

1. In iKnowMyMac, open Settings→ 然后 Helper and choose Install… (or choose Install helper during setup).
2. macOS asks for your approval. Open System Settings→ 然后 General→ 然后 Login Items (called Login Items & Extensions on newer macOS) and turn on iKnowMyMac. The app has an Open Login Items button that takes you there.
3. Back in iKnowMyMac, system processes appear on the next refresh.

如何移除辅助程序？#

在iKnowMyMac中打开“设置”→“辅助程序”，然后选择“卸载…”。系统进程会再次被隐藏，其他一切照常运行。

You can also turn it off in System Settings→ 然后 General→ 然后 Login Items. If you plan to delete the app, remove the helper first (see Uninstall).

如何将许可证移到新Mac？#

在旧Mac上，打开“设置”→“许可证”→“将许可证移到另一台Mac…”，确认后，在新Mac上激活同一个密钥。

1. On the old Mac, open iKnowMyMac Settings→ 然后 License.
2. Choose Move License to Another Mac…, then Deactivate This Mac. This frees one of your license's seats.
3. On the new Mac, install iKnowMyMac and paste the same key.

Your history on the old Mac isn't deleted; that copy of iKnowMyMac returns to the activation screen.

“此密钥已在其涵盖的所有Mac上激活。”如何自己释放一个席位？#

在购买邮件中链接的客户门户中：找到你的密钥，在要释放的Mac旁边按下“Deactivate”，然后重新激活。

1. Open your purchase email from Dodo Payments and follow its link to the customer portal.
2. Find your license key. The portal lists every Mac it is active on, by name.
3. Press Deactivate next to a Mac you no longer use. If iKnowMyMac on this Mac asks to be activated again (it lost its activation, say after a reinstall), deactivate this Mac's own old entry.
4. Back in iKnowMyMac, press Activate this Mac.

iKnowMyMac shows these same steps under the message. Deactivating never deletes anything on any Mac.

我的旧Mac已经不在、被抹掉或损坏了。如何释放它的席位？#

在购买邮件中链接的客户门户中将其停用（见上文）。找不到邮件？用你购买时使用的地址写信至support@iknowmymac.com，我们会为你释放席位。

When you write, include your license key or order number, and the name of the Mac to free if you know it. Once the seat is free, activate on your new Mac as usual. This also applies if you reinstalled macOS without deactivating first.

iKnowMyMac如何更新？#

通过Sparkle，这是Mac上标准的更新框架。打开自动检查后，App每天检查一次，并提供每个新版本。

The switch is in Settings→ 然后 General→ 然后 Updates, next to Check for Updates… for a check right now. Updates are signed, and iKnowMyMac verifies the signature before installing. The update check sends nothing about your Mac.

Updates are free. See what changed in the changelog.

iKnowMyMac如何检查我的Node.js、PHP和Go？#

在Package Watch中，“运行时”标签页会列出你Mac上的每个Node.js、PHP和Go，并将每个副本对照最新的安全发布版本进行检查。每个需要安全更新的行都有一项操作：落后的副本使用“修复…”，不再获得安全修复的副本使用“迁移到受支持的版本线”，旧版本使用“移除…”。

It looks in the folders of Homebrew, nvm, Volta, fnm, mise, asdf, Laravel Herd, MAMP and the installers from nodejs.org and go.dev, and reads each version from there. It never searches your whole home folder and never runs your shell profile; only Herd's PHP, which keeps no version on disk, is asked for its version.

• Fix… and Move to… show the exact command before it runs, such as brew upgrade node or nvm install 26.12.1, and run it only after you press its button. The old version stays installed beside the new one until you choose Remove…: Homebrew runs with HOMEBREW_NO_INSTALL_CLEANUP=1.
• Move to a supported line suggests the line your projects pin if it still gets security fixes, else the newest line that does: for Node.js, the newest even-numbered line, such as Node.js 26.
• A row says Used by 2 projects when projects pin its line, in .nvmrc, .node-version, .tool-versions, package.json (engines.node and volta.node), composer.json, go.mod or mise.toml.
• After a fix, Package Watch checks again: the row says Fixed, and the incident card, the Needs you row and the menu bar line update.
• nvm, Laravel Herd, the official installers and Java have their own answers below.
• Search anything finds the rows and the incident cards: type node, php, go, java, emudhra, php2shell or certifi.

The check is on by default and follows Package Watch's schedule. To turn it off, open Settings→ 然后 Package Watch and turn off Check Node.js, PHP and Go versions and certificate bundles.

如何一次修复所有内容？#

在“Package Watch”›“运行时”顶部按下“全部修复…”，或在某张事件卡片上按下它，只处理该事件。一个面板会按顺序列出每个步骤及其确切命令；取消勾选你不想要的步骤，然后按下“运行”。

1. Open iKnowMyMac, choose Package Watch in the sidebar, then the Runtimes tab.
2. Press Fix All… next to the summary at the top, or Fix All… on one incident card.
3. Read the list under Runs here: each step has a checkbox and its exact commands. Fixes are ticked; removing an old version and changing a project's pin never are.
4. Press Run, which names the number of ticked steps, such as Run 12 Steps. They run one at a time, in this order: Homebrew, then the version managers and installers, the Java JDKs, Composer and certifi, then the pins, and last the removals.

• It stops at the first step that fails and shows its output word for word; the steps after it do not run.
• Under Needs you, steps that need an administrator's password or Terminal each have their own button, such as Do It for Me….
• Steps done in another app, such as Herd's or MAMP's window, are named at the bottom: Fix… on their row shows the steps.

When it is done, Package Watch checks everything again, and each row it fixed says Fixed.

如何移除旧的Node.js、PHP或Go？#

在“Package Watch”›“运行时”中对应的行上按下“移除…”。iKnowMyMac会先列出仍在使用该版本的项目以及它们会受到什么影响，然后只在你按下“移除”后才运行安装器自己的命令，例如brew uninstall node@20。

1. In Package Watch→ 然后 Runtimes, find the old version. Remove… is on rows that no longer get security fixes, on an older copy beside a newer one from the same installer, and on rows Fix fixed.
2. Press Remove…. The sheet shows the exact command and, under Projects that use it, each project that pins that version.
3. To move a project to the new line, tick its pin. Each change is one line, shown as a diff, such as .nvmrc from 20 to 26.
4. Press Remove.

• Homebrew: brew uninstall node@20, or brew cleanup when a newer version of the same formula is installed. When another formula still needs it, Homebrew refuses, its message is shown word for word, and nothing is removed.
• nvm: nvm uninstall 20.3.1, in Terminal, here or copied, as for nvm's updates. Once it is removed, nvm use in a project that asks for it says it is not installed.
• fnm, mise and asdf: their own uninstall command. Volta has none, so the steps show its folder in the Finder to move to the Trash.
• The version nvm, fnm, mise or asdf uses as its default can't be removed: make another version the default first.
• Removing is not undone by iKnowMyMac: installing the version again brings it back. A pin change can be put back with Undo in History.

如何更新nvm安装的Node.js？#

在对应的行上按下“修复…”（对于不再获得安全修复的版本则按下“迁移到…”），然后选择方式：“在终端中”，你可以看着它运行；“在此处”，在只载入nvm自身脚本、从不载入你的Shell配置文件的Shell中运行；或者“拷贝”，自己将命令粘贴到终端中。

1. In Package Watch→ 然后 Runtimes, press Fix… on the nvm row, or Move to 26… on a version that no longer gets security fixes.
2. Choose In Terminal, Here or Copy at the top of the sheet. Each shows exactly what will run: the file Terminal opens, the script that runs here, or the commands to copy.
3. Press Run in Terminal, Run Here or Copy.

• In Terminal: iKnowMyMac writes a file in its own folder, ~/Library/Application Support/iKnowMyMac/Fix, holding only the commands shown, and Terminal opens and runs it. The file is deleted after a day. When Terminal says Finished, press Check Again.
• Here: the commands run in /bin/bash --noprofile --norc, which loads nvm's own nvm.sh and nothing else, and the output appears in the sheet.
• Copy: open Terminal (in Applications→ 然后 Utilities), paste the command, such as nvm install 24.22.1, press Return and wait until the prompt comes back.

The old version stays installed. An update leaves nvm's default alone: to make new Terminal windows use the new one, run nvm alias default 24.22.1. Move to a supported line also runs nvm alias default when the old version was the default.

如何更新Laravel Herd中的PHP？#

在Herd的PHP行上按下“修复…”，然后选择方式：在终端中或在此处运行Herd自己的命令herd php:update 8.4，或者选择“拷贝”，它还会显示在Herd窗口中的操作步骤。

In Herd's window, without iKnowMyMac:

1. Click the Herd icon in the menu bar and choose Open Herd.
2. Choose PHP in the sidebar.
3. Next to the PHP line iKnowMyMac marks, such as PHP 8.4, click Update. Herd installs the fixed version (8.4.27 on 21 October 2026) or later.
4. When it is done, Herd restarts PHP for your sites.

Herd's command asks Herd to fetch the same version or later, as its window does, and Herd keeps each PHP version it installed. PHP 8.1 and older no longer get security fixes from the PHP project: in Herd's window, click Install next to a supported line and choose it for your sites.

如何更新MAMP中的PHP？#

MAMP自带PHP，因此更新的PHP随更新的MAMP一起提供：安装最新的MAMP，然后在其PHP设置中选择已修复的PHP版本。

1. Open MAMP's download page, mamp.info.
2. Download the newest MAMP. It should list the fixed PHP version iKnowMyMac names, or later.
3. Quit MAMP, then open the downloaded file and follow the installer.
4. Open MAMP, and in its PHP settings choose that version or later for your sites.

MAMP keeps your sites and databases when it is updated; its older PHP versions stay in /Applications/MAMP/bin/php.

如何更新通过官方安装器安装的Node.js或Go？#

下载已修复版本的安装器，打开它并按照安装器操作。它会替换/usr/local中的Node.js或/usr/local/go中的Go。对于不再获得安全修复的版本，在你下载更新的安装器后，“迁移到…”可以为你安装它。

1. Download the installer for the version iKnowMyMac names: for Node.js, node-v24.22.1.pkg from nodejs.org; for Go, go1.26.10.darwin-arm64.pkg from go.dev/dl. Fix… has a button that downloads the right one.
2. Open the downloaded file and follow the installer. You will be asked for your Mac's password.
3. Check it: open Terminal and run /usr/local/bin/node --version (it shows v24.22.1) or /usr/local/go/bin/go version (it shows go1.26.10).

For a version that no longer gets security fixes, such as Node.js 16, press Move to 26…, download the newer installer with the sheet's button (it goes to your Downloads folder), then choose Do it for me: iKnowMyMac checks the installer's signature with pkgutil and installs it with installer after macOS asks for an administrator's password with its own prompt. The password goes to macOS, never to iKnowMyMac. Or choose Steps and open the installer yourself.

Node.js and Go from nvm, Homebrew, ~/sdk and the others are not touched.

如何从Java JDK中移除eMudhra证书？#

在“Package Watch”›“运行时”中该JDK上按下“修复…”。对于来自Homebrew或位于你的~/Library/Java中的JDK，iKnowMyMac会自己移除这些证书，无需密码，并保留一份副本供“撤销”使用。对于/Library/Java中的JDK，选择“替我完成”，它会使用标准的macOS管理员提示，或者按照下方的步骤操作。

No JDK update removes them yet. The certificates are emSign ECC Root CA - G3 and, in some JDKs, AAA Certificate Services, Sectigo's, which cross-signed the eMudhra certificates. iKnowMyMac names the JDK and the certificates it found.

For a JDK from Homebrew or in ~/Library/Java, the sheet shows each command, then Remove 2 Certificates:

1. It keeps a copy of the JDK's cacerts file as cacerts.before-emudhra beside it.
2. It lists the certificates with that JDK's own keytool -list -v and finds the eMudhra ones by their SHA-256 fingerprint, never by name.
3. It removes each one with keytool -delete.
4. It reads the file again with Package Watch's own check. If a certificate is still there, or anything is unexpected, it puts the copy back and shows the steps instead.

Undo puts the copy back. Quit and reopen any Java app or server that was running.

A JDK in /Library/Java belongs to the system, so changing it needs an administrator's password. Choose Do it for me: macOS asks for the password with its own prompt and runs the script the sheet shows, which keeps the same copy and removes the same certificates. The password goes to macOS, never to iKnowMyMac, and nothing is kept. Undo asks again and puts the copy back. Or choose Steps and do it yourself in Terminal; the example is a JDK in /Library/Java:

1. Open Terminal (in Applications→ 然后 Utilities).
2. Find the name this JDK gives each certificate: paste this and press Return. It prints a line such as Alias name: emsigneccrootcag3 [jdk] for each.

   /Library/Java/JavaVirtualMachines/temurin-17.jdk/Contents/Home/bin/keytool -list -v -keystore /Library/Java/JavaVirtualMachines/temurin-17.jdk/Contents/Home/lib/security/cacerts -storepass changeit | awk '/^Alias name:/ {name=$0} /86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B|D7:A7:A0:FB:5D:7E:27:31:D7:71:E9:48:4E:BC:DE:F7:1D:5F:0C:3E:0A:29:48:78:2B:C8:3E:E0:EA:69:9E:F4/ {print name}'

3. For each line, paste this, put what follows Alias name: in place of NAME (keep the quotes), and press Return. Type your Mac's password when asked.

   sudo /Library/Java/JavaVirtualMachines/temurin-17.jdk/Contents/Home/bin/keytool -delete -keystore /Library/Java/JavaVirtualMachines/temurin-17.jdk/Contents/Home/lib/security/cacerts -storepass changeit -alias 'NAME'

4. Quit and reopen any Java app or server that was running.

• sudo is needed only for a JDK in /Library/Java. For a JDK in your own ~/Library/Java or from Homebrew, leave it out.
• changeit is the password every JDK's cacerts comes with. If yours was changed, use that one.
• Java 8 keeps the file at jre/lib/security/cacerts inside the JDK's Home folder.
• A JDK update replaces this file: iKnowMyMac checks it again after one.

在哪里可以看到iKnowMyMac运行了什么？#

在“设置”›“Package Watch”中的“历史记录”下：从“Package Watch”›“运行时”运行的每项修复、迁移、移除和固定版本更改，最新的排在最前，并附有与当时显示完全相同的命令、运行方式以及结束方式。

1. Open Settings→ 然后 Package Watch.
2. Scroll to History.

• How it ran: Ran here; Ran here, loading only its own script; Opened in Terminal; With the administrator prompt; Done by iKnowMyMac; or Pins changed.
• How it ended: Finished; Stopped, with the reason, such as the step that failed and its status; Cancelled; or, for Terminal, How it ended is shown there.
• Undo is on the entries that can be put back: a JDK's cacerts file and a project's pins.

The history is kept on your Mac, in ~/Library/Application Support/iKnowMyMac/Fix. It never holds a password and is not sent anywhere.

如何获得退款？#

在购买后14天内，用你购买时使用的电子邮件地址写信至support@iknowmymac.com。你无需说明理由。

Dodo Payments, our Merchant of Record, returns the money to the way you paid. When the refund goes through, the key is deactivated and the app becomes read-only at its next license check (see License inactive). Your data on your Mac is never deleted.

The details are in the refund policy. If you posted about iKnowMyMac, you may be able to get money back through the post-for-refund program.

“许可证未激活”是什么意思？#

许可证服务器报告该密钥已不再有效，通常是在退款或拒付之后。iKnowMyMac会切换到只读模式。

Nothing is ever deleted. To restore everything, choose Reactivate… in the banner and enter an active key.

“许可证需要校验”是什么意思？#

iKnowMyMac超过30天无法连接到许可证服务器。连接到互联网，然后选择“立即验证”。

Monitoring keeps working meanwhile; actions and alerts are paused until one check succeeds.

我的许可证显示为未激活，但我并没有申请退款。#

用你的订单邮箱写信至support@iknowmymac.com，我们会处理。

如何完全卸载iKnowMyMac？#

先在“设置”中移除辅助程序，退出App，然后将它从“应用程序”拖到废纸篓。也可以选择删除它的数据文件夹。

1. If you installed the helper: Settings→ 然后 Helper→ 然后 Uninstall….
2. If you might use your license on another Mac: Settings→ 然后 License→ 然后 Move License to Another Mac… to free the seat.
3. Quit iKnowMyMac (⌘ Q).
4. Drag iKnowMyMac from your Applications folder to the Trash.
5. Optional: delete ~/Library/Application Support/iKnowMyMac, which holds your 30-day history database and battery health samples.

To remove every trace, you can also delete ~/Library/Preferences/com.gs.iknowmymac.plist (your settings) and the iKnowMyMac license item in Keychain Access. If you turned on Open at login, check that it's gone from System Settings→ 然后 General→ 然后 Login Items.

运行iKnowMyMac需要什么？#

一台搭载Apple silicon（M1或更新）、运行macOS 15 Sequoia或更高版本的Mac。

• About 4 MB to download. History takes about 94 MB for 30 days of 80 apps on our test Mac.
• An internet connection to activate, for the weekly license check and for updates. Monitoring itself works offline.
• CPU and GPU temperatures and fan speeds are validated on M1 Pro; on other chips the app shows the thermal state.
• On macOS 26 and later, an on-device Apple model phrases the diagnosis summary. On macOS 15, the same diagnosis is shown without it.

如何联系你们？#

发送电子邮件至support@iknowmymac.com。我们会阅读每一封邮件。

It helps to include your Mac model, your macOS version, the iKnowMyMac version (in the About window) and what you expected to happen. For license questions, write from the email address you bought with. Please never send us passwords.

购买和更新

安全和权限

功能