Why is WallpaperAgent using network data on my Mac?

Last updated: 2026-08-08

What it is

WallpaperAgent is an Apple per-user system agent. It saves and applies wallpaper and screen saver settings, discovers and coordinates the system extensions that provide those experiences, and participates in managing their stored content. Its scope includes static images, dynamic wallpapers, aerial scenes, and screen savers. Describing WallpaperAgent as nothing more than an aerial-video downloader misses most of its role.

The normal executable is found at /System/Library/CoreServices/WallpaperAgent.app/Contents/MacOS/WallpaperAgent, with the bundle identifier com.apple.wallpaper.agent. It is managed as an on-demand user agent by launchd. That means it does not have to run continuously, but quitting it in Activity Monitor does not permanently disable it. macOS can start WallpaperAgent again when another wallpaper-related service is requested.

Why it talks to the network

WallpaperAgent’s network-related role is primarily to coordinate wallpaper extensions as they refresh catalogs and obtain assets that are not already cached. Apple does not publish a complete breakdown of which internal process performs every step, so the name shown by Activity Monitor or a traffic monitor should not be treated as definitive proof that WallpaperAgent itself owns every connection.

Confirmed triggers include selecting a dynamic wallpaper, image, or aerial item marked with a download arrow; enabling aerial shuffling; and allowing macOS to fill in related assets when network and background conditions permit. The WallpaperAerialsExtension examined on a verified system contains the implementations used to download catalogs, thumbnails, and video. It has network-client capability and connects to Apple configuration and media-delivery services, including configuration.apple.com and sylvan.apple.com.

Those examples are not a permanent or complete endpoint list. Hosts and paths can change with the operating system and its asset manifests. Connection ownership can also vary by system release and by the attribution method used by a monitoring tool. WallpaperAgent may coordinate the work while a related extension appears as the direct network client.

How much traffic is normal

There is no reliable process-level baseline published by Apple. Normal activity can range from almost no traffic, through occasional catalog or thumbnail checks, to a conspicuous media-sized burst while a new dynamic wallpaper or aerial video is downloaded.

If the selected wallpaper is a local static image and the required assets are already cached, WallpaperAgent normally should not produce large amounts of continuous content traffic. Traffic can rise substantially after choosing new downloadable content, enabling shuffled aerial scenes, or clearing the relevant cache. Background completion of missing assets can also explain activity that does not begin immediately after a visible click.

A specific number of megabytes cannot be stated reliably from the available evidence. Asset sizes may differ, and Apple has not published a dependable per-item size or a normal traffic range for WallpaperAgent. Claims that every asset is 4K, or that every aerial download has one predictable size, are likewise unverified.

Can you turn it off

Apple does not provide a supported switch for disabling WallpaperAgent. Forcefully removing or disabling the agent can prevent wallpaper or screen saver changes from being applied, cause a temporary black background, or make macOS fall back to default content. The system will also usually launch the agent again when its services are needed.

If the goal is to avoid optional media downloads, change the selected content instead of modifying launchd or deleting a protected system component. On macOS Sonoma and Sequoia, choose a local static image under System Settings > Wallpaper, then select a non-aerial option under System Settings > Screen Saver. On macOS Tahoe, choose the wallpaper under System Settings > Wallpaper, then use the Screen Saver area on that page to select non-aerial content.

This changes what macOS needs to fetch without trying to disable the general agent that manages wallpaper and screen saver settings.

What people get wrong

“WallpaperAgent is only an aerial-video downloader.” It is not. WallpaperAgent coordinates the broader wallpaper and screen saver system. Aerial scenes are one category supplied through a related extension.

“Seeing WallpaperAgent means the Mac has malware.” The Apple-signed instance at /System/Library/CoreServices/WallpaperAgent.app is part of macOS. A file with the same name in another directory is not automatically legitimate; its path, signature, and origin should be checked independently.

“WallpaperAgent continuously streams the wallpaper.” There is no evidence for that claim. macOS has local asset storage and caching. Large transfers are generally associated with acquiring uncached content, not with downloading the same media again every time it plays.

“Every 4K aerial download is performed directly by the WallpaperAgent process.” That has not been established. The verified WallpaperAerialsExtension contains download code and has network-client permission. Process attribution can differ across system releases and monitoring tools, and the presence of 4K-related resource keys does not prove that every asset or transfer is 4K.

“Deleting or permanently disabling WallpaperAgent is a safe Mac optimization.” It is a protected system component, and Apple offers no supported way to turn it off. Anyone who does not want dynamic or aerial downloads should select local static content in System Settings instead of removing the component or changing its launchd configuration.

“Force Quit in Activity Monitor switches WallpaperAgent off.” It only ends the current process instance. launchd manages the agent and can restart it when wallpaper services are requested again.

“The fix is to set AutomaticDownload for idleassetsd and then kill idleassetsd.” That widely circulated advice failed both checks on the independently examined current system. The AutomaticDownload key was absent from the WallpaperAerialsExtension binary, although different preference names such as ConfigDataPreference and shouldAutomaticallyInstallSystemData were present. The idleassetsd executable and launchd job were also absent. A directory at /Library/Application Support/com.apple.idleassetsd/ can remain as data left by an older system, but its existence does not prove that the old process still runs.

“If idleassetsd is gone, dynamic wallpapers no longer download assets.” Downloads still occur; the responsibility has moved to WallpaperAgent together with WallpaperAerialsExtension on the verified system. To reduce that traffic, select static wallpaper and a non-aerial screen saver rather than running a command aimed at a process that is no longer present.

Seeing what it actually used

When the question is how much data your own Mac transferred, measure the process activity instead of relying on a universal estimate that Apple has not published. Bytetally can show per-process traffic over the relevant time window, letting you compare WallpaperAgent activity before and after selecting downloadable content. Also check whether the transfer is attributed to WallpaperAerialsExtension, because ownership can vary by system release and monitoring method.

Related processes

Common questions