Lots of 'unexpected security xattr' messages in Disk Utility First Aid

In a normal boot, I get dozens of errors as per the attached screenshot when I run First Aid in Disk Utility on the 'Macintosh HD Data' partition on my Studio M4 Max. (Yet running on top level 'Macintosh HD volumes' is OK.)

If I boot into Recovery and run Disk Utility, these errors do not appear.

Any advice on this?


Mac Studio

Posted on Jun 13, 2026 1:21 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 14, 2026 4:51 AM

Hi,


Warning: id 1920588 unexpected security xattr - The resource fork xattr is missing error on macOS is an unexpected advisory generated in Disk Utility when the First Aid tool cannot find metadata in the resource fork of an associated file.


This could be related to the following:


  • Spotlight Indexing: Files in .Spotlight-V100/Store-V2/DeadFiles may trigger these warnings. 
  • Snapshots: Time Machine backups often contain read-only snapshots with metadata warnings that do not affect the live volume. 
  • Third-Party Sync: Applications like Dropbox, OneDrive, or Backblaze can sometimes create compressed files with missing metadata attributes.


Possible resolutions are:


  1. Rebuilding Spotlight Indexes by adding the volume to Spotlight Privacy and then removing it. 
  2. Running First Aid in Recovery Mode to ensure the volume is unmounted. 
  3. Checking for Corrupted Snapshots if the warning is linked to a Time Machine backup ID.
  4. Excluding Problematic Files from backup/sync utilities if they are identified as the source of the metadata issue. 


You could also check with EtreCheck Pro: EtreCheck Pro is a diagnostic utility for macOS that scans hardware, software, and system configurations to identify serious problems, adware, and performance bottlenecks. 


It is designed to generate detailed, anonymized reports that can be shared with Apple Support Communities or technical experts for troubleshooting.


https://etrecheck.com/en/details.html


However, general advice for persistent First Aid errors that cannot be repaired involves erasing the disk and reinstalling macOS after backing up data.....

5 replies
Question marked as Top-ranking reply

Jun 14, 2026 4:51 AM in response to imacken

Hi,


Warning: id 1920588 unexpected security xattr - The resource fork xattr is missing error on macOS is an unexpected advisory generated in Disk Utility when the First Aid tool cannot find metadata in the resource fork of an associated file.


This could be related to the following:


  • Spotlight Indexing: Files in .Spotlight-V100/Store-V2/DeadFiles may trigger these warnings. 
  • Snapshots: Time Machine backups often contain read-only snapshots with metadata warnings that do not affect the live volume. 
  • Third-Party Sync: Applications like Dropbox, OneDrive, or Backblaze can sometimes create compressed files with missing metadata attributes.


Possible resolutions are:


  1. Rebuilding Spotlight Indexes by adding the volume to Spotlight Privacy and then removing it. 
  2. Running First Aid in Recovery Mode to ensure the volume is unmounted. 
  3. Checking for Corrupted Snapshots if the warning is linked to a Time Machine backup ID.
  4. Excluding Problematic Files from backup/sync utilities if they are identified as the source of the metadata issue. 


You could also check with EtreCheck Pro: EtreCheck Pro is a diagnostic utility for macOS that scans hardware, software, and system configurations to identify serious problems, adware, and performance bottlenecks. 


It is designed to generate detailed, anonymized reports that can be shared with Apple Support Communities or technical experts for troubleshooting.


https://etrecheck.com/en/details.html


However, general advice for persistent First Aid errors that cannot be repaired involves erasing the disk and reinstalling macOS after backing up data.....

Jun 14, 2026 6:48 AM in response to imacken

If your Mac Studio is otherwise running OK, then there is nothing to do and nothing to worry about.

The version of Disk Utility on the Startup Disk, should not be used to Verify or Repair the Startup Volume.

If Disk Utility First Aid in macOS Recovery Mode show no Errors, then there is probably nothing to worry about.


If your Mac Studio is having issues or running poorly, run EtreCheckPro as suggested.

Download and run the free version of EtreCheckPro, from > https://etrecheck.com/en/index.html

Then post back here with your Report, as per > How to use the Add Text Feature When Post… - Apple Community

Jun 15, 2026 2:39 PM in response to imacken

FYI, make sure to run First Aid on the hidden Container as detailed in the following Apple article:

How to repair a Mac storage device with Disk Utility - Apple Support


I recently encountered this and First Aid did get rid of all of those types of issues (I was booted into Recovery Mode). You may need to run First Aid multiple times. It doesn't help that the information shown in First Aid can be very confusing at times (or at least the way it is presented).


Lots of 'unexpected security xattr' messages in Disk Utility First Aid

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.