tech

Editor's note: Macworld has tested the macOS Ventura 13.3.1 update released on Friday, and it appears that the update fixes this problem. This article has been updated to reflect these results.

If you're a macOS Ventura user and you've set up your user account with the Home directory saved to an external storage device, you should wait before updating to version 13.3. A number of users who set up their Macs this way have found that they cannot access their accounts after installing the update. [Hat tip to Macworld reader Lee.]

The problem, which is addressed on Reddit, is that after updating to 13.3, the Mac restarts, and then when the user tries to log in, a message appears that says the log-in “failed because an error occurred.” No explanation of the error is offered, and clicking the OK button simply sends the user back to the login screen.

Update April 7, noon PT: Apple released macOS Ventura 13.3.1 and our testing indicates that the update fixes this problem. Update to 13.3.1 if you have this issue.

If you cannot install the 13.3.1 update, a workaround explained by Neat_Release_2683 on Reddit, offers a way to get your Mac working. It involves turning off System Integrity Protection while in Recovery Mode. I was able to replicate the problem on a 14-inch M1 Pro MacBook Pro with Ventura 13.3 and an account Home folder saved to a USB-C flash drive.

I used the steps below to fix it.

Workaround to macOS Ventura 13.3 external Home folder bug

If your user account's Home folder is saved to an external drive, and it is the only account with admin rights, you can try using the workaround below. If your Mac has another admin account on it with the Home folder saved to the Mac's internal drive, there is another workaround you can use.

At a glance

• Time to complete: 5 minutes
• Tools required: macos Ventura 13.3

1.

Boot into Recovery Mode

Foundry

On M-series Macs, hold down the power button and continue to hold until the screen says, “Loading startup options.”

On Intel Macs, hold down the Command and R keys.

Select the Option icon when it appears and click Continue.

The macOS Recovery screen should appear with user login icons. Select an account that has admin rights, then click Next. Enter the password for the account.

2.

Go to the Terminal

Foundry

You're now in Recovery Mode. Ignore the main window and click the Utilities menu. Select Terminal. If you're not familiar with using the Terminal, it's okay. The Terminal is the command-line interface for the Mac, and you'll enter an easy command.

3.

Turn off SIP

Foundry

A Terminal window appears, with a prompt that says something like, -bash-3.2# and then a cursor.

Type csrutil disable and then press the Return key.

That command turns off System Integrity Protection, and if you've never turned it off before, a warning will appear. Type y to continue.

Enter your username and then your password, It may look like your Mac is doing nothing but wait a bit. A message telling you to restart your Mac will appear when the changes are implemented.

4.

Restart, login, check iCloud, re-enable SIP

Foundry

Now restart your Mac ( > Restart). You should be able to log into your account.

Go to System Settings and check your iCloud settings to make sure everything is enabled.

Now you can re-enable SIP by repeating steps 1 through 4, but at the Terminal in step 2, enter the command csrutil enable instead. However, Macworld reader Andy in the U.K. wrote to us to say that SIP had to stay disabled for them in order to get iCloud to work properly across “all relevant apps.” So you may want to keep it off until Apple issues a fix

Workaround if you have multiple admin accounts

You can try the following workaround for the user account with the Home folder on an external drive. But you need to have another account with admin rights on the Mac that also has its Home folder on the internal Mac storage. Also, Macworld reader Scott informed us that the method below may work only with MacBooks; it wasn't available to him on his M1 Mac mini. Apple's support document about this SIP feature addresses only “Mac laptop[s] with Apple silicon.”

1. Log into the admin account that has its Home folder saved to internal storage.
2. Go to System Settings > Privacy & Security.
3. In the main section of the window, scroll down to the “Allow accessories to connect” section. Click the pop-up to the right and select Always.

Foundry

4. MacOS requires a username and password to modify this setting. Enter the info and click Modify Settings.
5. Log out, and you should be able to log into the account that has its Home folder on external storage.

What is causing the problem?

Based on my hands-on experience (and not a deep tech dive into working code), the problem seems to be related to a feature within macOS's System Integrity Protection, referred to as SIP. One of the features of SIP is that it can alert you whenever an accessory (such as an external storage device) is connected to your Mac.

With Ventura 13.3, this alert seems to hinder the ability to log in, creating a Catch-22 situation. Because the external drive has yet to be approved by the user, the Mac won't access the drive and log in can't be accomplished. But if you can't log in, you can't approve the drive. If SIP is turned off, then the alerts won't appear and the external drive can connect.

Why would anyone save a Home folder to an external drive in the first place? Mostly it's because the Mac's internal storage is running out. The Home folder saves a lot of user info, such as app libraries and your files. It is possible to save individual components of the Home folder to an external drive instead of the whole Home folder–for example, on a 2013 Mac Pro with a 512GB SSD that I use at home, I save my iMovie, Photos, and Music libraries to a 5TB external drive. But some people may not want to hassle with individual components and simply place the whole Home folder on an external drive.

Apple has been contacted about this issue but has not yet responded to our inquiry. It's unclear if this issue is addressed in the macOS Ventura 13.4 beta that is currently in the works. We'll update this article with any further developments.