High RAM usage by com.apple.WebKit.WebContent.CaptivePortal

Top Processes Snapshot by Memory:

    Process (count) RAM usage (Source - Location)

    com.apple.WebKit.WebContent.CaptivePortal (5) 1.48 GB (Apple)

    EtreCheckPro 1.07 GB (Etresoft, Inc.)

    com.apple.appkit.xpc.openAndSavePanelService (5) 434 MB (Apple)

    com.apple.WebKit.GPU (2) 413 MB (Apple)

    MTLCompilerService (33) 272 MB (Apple)


Top Processes Snapshot by Network Use:

    Process Input / Output (Source - Location)



idk what this is

    com.apple.WebKit.Networking 638 MB / 9 MB (Apple)

    mDNSResponder 2 MB / 130 KB (Apple)

    apsd 4 KB / 7 KB (Apple)

    trustd 7 KB / 2 KB (Apple)

    netbiosd 4 KB / 3 KB (Apple)


Top Processes Snapshot by Energy Use:

    Process (count) Energy (0-100) (Source - Location)

    com.apple.activitymonitor.helper 218 (Apple)

    WindowServer 11 (Apple)

    sysmond 7 (Apple)

    com.apple.WebKit.WebContent.CaptivePortal (5) 5 (Apple)

    coreaudiod 4 (Apple)


Virtual Memory Information:

    Physical RAM: 16 GB


Posted on May 13, 2026 1:25 AM

Reply
Question marked as Top-ranking reply

Posted on May 13, 2026 2:43 AM

Thank you for posting a snippet from  Etrecheck application Report


Yes, we have a good idea why this is only a snippet


That is not your fault, the Apple Support Community Web Site has been malfunctions since May 5, 2026 


We can only hope 🤞 this will be fixed sometime in the near future  


Here’s what each thing is:


1 - com.apple.WebKit.WebContent.CaptivePortal


Apple’s embedded web browser process used for login pages, network checks, and apps that use Safari WebKit internally.

“Captive Portal” specifically relates to Wi-Fi sign-in/network verification.

5 processes using 1.48 GB total is somewhat high, but not automatically malicious.

Common causes:

1 - A stuck Wi-Fi login/session

2 - System Settings panes

3 - Apps embedding Safari/WebKit

4 - Background web views


2 - EtreCheckPro


This is the app EtreCheckPro itself.

It’s a diagnostics/scanning utility, so over 1 GB RAM during analysis is believable.

If you’re not actively using it, quit it.


3 - com.apple.appkit.xpc.openAndSavePanelService


The macOS file picker (“Open…” / “Save…” dialogs).

Multiple apps can spawn these.

434 MB across 5 processes is elevated but usually temporary.


4 - com.apple.WebKit.GPU


GPU acceleration for Safari/WebKit rendering.

Normal.


5 - MTLCompilerService

Metal shader compiler service.

Appears when apps/games/browser tabs use graphics acceleration.

33 instances sounds dramatic but is often harmless.


6 - The one you specifically asked about:


com.apple.WebKit.Networking


Handles network traffic for Safari/WebKit-based content.

The 638 MB / 9 MB means:

~638 MB downloaded/input

~9 MB uploaded/output


This is not RAM usage , It is network transfer volume.

Common sources Safari tabs,Apple login pages, Electron/WebKit apps, Streaming/video/content loading


7 - The other network processes are standard macOS services, mDNSResponder, DNS + Bonjour networking


8 - Your energy section also looks normal.


Activity Monitor.helper high energy is expected while Activity Monitor/EtreCheck is actively sampling processes.


WindowServer is the graphical display compositor.


Given you have 16 GB RAM:


The biggest concern is really the WebKit/CaptivePortal buildup plus EtreCheckPro.


Nothing here screams malware.


If your Mac feels slow.

  1. Quit EtreCheckPro.
  2. Restart Safari.
  3. Disconnect/reconnect Wi-Fi.
  4. Reboot the Mac.


9 - Check Activity Monitor >>Memory tab:


Look at “Memory Pressure” graph, Red/yellow = actual problem.


10 - If WebContent.CaptivePortal keeps multiplying after reboot:


A - Disable VPN temporarily

B - Forget/rejoin Wi-Fi


Boot in Safe Mode once and report back



1 reply
Question marked as Top-ranking reply

May 13, 2026 2:43 AM in response to Morgan_rooney_

Thank you for posting a snippet from  Etrecheck application Report


Yes, we have a good idea why this is only a snippet


That is not your fault, the Apple Support Community Web Site has been malfunctions since May 5, 2026 


We can only hope 🤞 this will be fixed sometime in the near future  


Here’s what each thing is:


1 - com.apple.WebKit.WebContent.CaptivePortal


Apple’s embedded web browser process used for login pages, network checks, and apps that use Safari WebKit internally.

“Captive Portal” specifically relates to Wi-Fi sign-in/network verification.

5 processes using 1.48 GB total is somewhat high, but not automatically malicious.

Common causes:

1 - A stuck Wi-Fi login/session

2 - System Settings panes

3 - Apps embedding Safari/WebKit

4 - Background web views


2 - EtreCheckPro


This is the app EtreCheckPro itself.

It’s a diagnostics/scanning utility, so over 1 GB RAM during analysis is believable.

If you’re not actively using it, quit it.


3 - com.apple.appkit.xpc.openAndSavePanelService


The macOS file picker (“Open…” / “Save…” dialogs).

Multiple apps can spawn these.

434 MB across 5 processes is elevated but usually temporary.


4 - com.apple.WebKit.GPU


GPU acceleration for Safari/WebKit rendering.

Normal.


5 - MTLCompilerService

Metal shader compiler service.

Appears when apps/games/browser tabs use graphics acceleration.

33 instances sounds dramatic but is often harmless.


6 - The one you specifically asked about:


com.apple.WebKit.Networking


Handles network traffic for Safari/WebKit-based content.

The 638 MB / 9 MB means:

~638 MB downloaded/input

~9 MB uploaded/output


This is not RAM usage , It is network transfer volume.

Common sources Safari tabs,Apple login pages, Electron/WebKit apps, Streaming/video/content loading


7 - The other network processes are standard macOS services, mDNSResponder, DNS + Bonjour networking


8 - Your energy section also looks normal.


Activity Monitor.helper high energy is expected while Activity Monitor/EtreCheck is actively sampling processes.


WindowServer is the graphical display compositor.


Given you have 16 GB RAM:


The biggest concern is really the WebKit/CaptivePortal buildup plus EtreCheckPro.


Nothing here screams malware.


If your Mac feels slow.

  1. Quit EtreCheckPro.
  2. Restart Safari.
  3. Disconnect/reconnect Wi-Fi.
  4. Reboot the Mac.


9 - Check Activity Monitor >>Memory tab:


Look at “Memory Pressure” graph, Red/yellow = actual problem.


10 - If WebContent.CaptivePortal keeps multiplying after reboot:


A - Disable VPN temporarily

B - Forget/rejoin Wi-Fi


Boot in Safe Mode once and report back



High RAM usage by com.apple.WebKit.WebContent.CaptivePortal

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.