Port 6379

What’s running on port 6379 on my Mac?

6379 is Redis, and its open-source fork Valkey. Redis has no password by default, which makes it the one port on this list you most need to keep off your network.

Commonly used by

  • Redis (Homebrew)brew services start redis runs redis-server on 127.0.0.1:6379.
  • ValkeyThe Linux Foundation fork keeps the same default port and protocol.
  • Docker redis image-p 6379:6379 shows up as com.docker.backend (or OrbStack).
  • Sidekiq, BullMQ, CeleryJob queues that connect to 6379; they’re clients, not the listener.

Check what’s on port 6379

lsof -nP -iTCP:6379 -sTCP:LISTEN

redis-server or valkey-server is a native install. Its path (ps -o command -p <PID>) tells you whether it came from Homebrew. com.docker.backend or OrbStack means a container: docker ps --filter publish=6379 names it.

Leave off -sTCP:LISTEN to see every app connected to it, which is a quick way to find which worker or dev server is using the cache.

With Stat Space: statspace port 6379.

Free it or move it

InstallStopChange the port
Homebrewbrew services stop redisport 6380 in /opt/homebrew/etc/redis.conf
Dockerdocker stop <name>-p 127.0.0.1:6380:6379
Anyredis-cli -p 6379 shutdownredis-server --port 6380

Then update REDIS_URL in your app, for example redis://localhost:6380.

Security: never expose 6379

Redis was designed for trusted networks. Out of the box there’s no password, and any client that connects can read every key, delete everything with FLUSHALL, or change the server’s config. Exposed Redis servers are routinely found and abused by automated scanners.

  • Homebrew’s redis.conf has bind 127.0.0.1 ::1 and protected-mode yes. Keep both.
  • Docker’s -p 6379:6379 listens on all of your Mac’s interfaces, and the official image doesn’t require a password. Use -p 127.0.0.1:6379:6379, or "127.0.0.1:6379:6379" in Compose.
  • If something must reach it from another machine, set requirepass (or ACL users) and limit bind to that interface.

Verify with lsof: 127.0.0.1:6379 is right, *:6379 is not. See dev server exposed to the network.

Seeing it live

Stat Space lists 6379 as Redis and warns if it’s bound to all interfaces. With Pro, a containerized Redis shows its container and image name instead of com.docker.backend.

Questions

How do I stop Redis on a Mac?

For Homebrew, brew services stop redis. For Docker, docker stop <container>. Or send a clean shutdown with redis-cli shutdown.

How do I run Redis on a different port?

Run redis-server --port 6380, or set port 6380 in /opt/homebrew/etc/redis.conf and restart the service. Connect with redis-cli -p 6380.

Can I see what's connected to my Redis?

Yes: redis-cli client list shows each client's address and name. lsof -nP -iTCP:6379 also lists established connections from local processes.

Get started

Know what your Mac is doing, without adding to it.

Free, no account. Pro is $9.99 once for the first 100 buyers.