What’s running on port 6379 on my Mac?
6379 is Redis, and its open-source fork Valkey. Redis has no password by default, which makes it the one port on this list you most need to keep off your network.
Updated
Commonly used by
- Redis (Homebrew)
brew services start redisrunsredis-serveron 127.0.0.1:6379. - ValkeyThe Linux Foundation fork keeps the same default port and protocol.
- Docker
redisimage-p 6379:6379shows up ascom.docker.backend(or OrbStack). - Sidekiq, BullMQ, CeleryJob queues that connect to 6379; they’re clients, not the listener.
Check what’s on port 6379
lsof -nP -iTCP:6379 -sTCP:LISTEN
redis-server or valkey-server is a native install. Its path (ps -o command -p <PID>) tells you whether it came from Homebrew. com.docker.backend or OrbStack means a container: docker ps --filter publish=6379 names it.
Leave off -sTCP:LISTEN to see every app connected to it, which is a quick way to find which worker or dev server is using the cache.
With Stat Space: statspace port 6379.
Free it or move it
| Install | Stop | Change the port |
|---|---|---|
| Homebrew | brew services stop redis | port 6380 in /opt/homebrew/etc/redis.conf |
| Docker | docker stop <name> | -p 127.0.0.1:6380:6379 |
| Any | redis-cli -p 6379 shutdown | redis-server --port 6380 |
Then update REDIS_URL in your app, for example redis://localhost:6380.
Security: never expose 6379
Redis was designed for trusted networks. Out of the box there’s no password, and any client that connects can read every key, delete everything with FLUSHALL, or change the server’s config. Exposed Redis servers are routinely found and abused by automated scanners.
- Homebrew’s
redis.confhasbind 127.0.0.1 ::1andprotected-mode yes. Keep both. - Docker’s
-p 6379:6379listens on all of your Mac’s interfaces, and the official image doesn’t require a password. Use-p 127.0.0.1:6379:6379, or"127.0.0.1:6379:6379"in Compose. - If something must reach it from another machine, set
requirepass(or ACL users) and limitbindto that interface.
Verify with lsof: 127.0.0.1:6379 is right, *:6379 is not. See dev server exposed to the network.
Seeing it live
Stat Space lists 6379 as Redis and warns if it’s bound to all interfaces. With Pro, a containerized Redis shows its container and image name instead of com.docker.backend.
Questions
How do I stop Redis on a Mac?
For Homebrew, brew services stop redis. For Docker, docker stop <container>. Or send a clean shutdown with redis-cli shutdown.
How do I run Redis on a different port?
Run redis-server --port 6380, or set port 6380 in /opt/homebrew/etc/redis.conf and restart the service. Connect with redis-cli -p 6380.
Can I see what's connected to my Redis?
Yes: redis-cli client list shows each client's address and name. lsof -nP -iTCP:6379 also lists established connections from local processes.
Know what your Mac is doing, without adding to it.
Free, no account. Pro is $9.99 once for the first 100 buyers.