Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Use the storage monitor built into your operating system, then compare every process over the same observation period. On macOS, start with Activity Monitor’s Disk tab; on Linux, use iotop; on Windows, the documented Performance Monitor method uses the process counter Process(*)IO Write Operations/sec. These tools identify active writers, but none can turn process activity into an exact app-by-app total of lifetime SSD NAND writes.
Choose the right view before you measure
“Which app is writing the most?” can mean two different things:
As an Amazon Associate I earn from qualifying purchases.
- Current activity: which process is generating the most traffic now, or during a defined interval.
- Cumulative wear: which app has contributed the most to the drive’s total physical writes since installation.
The first question is answerable with operating-system monitors. The second is not reliably attributable at app level: SSD controllers, filesystems, caches and kernel queues transform application requests before NAND cells are written. Start by deciding which question you need to answer, then use one consistent observation window for every process.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Platform and method | What it attributes | What it measures | Important scope |
|---|---|---|---|
| macOS Activity Monitor, Disk tab | Running apps and processes | Disk reads and writes shown by the system | Fast, general-purpose overview |
| macOS Xcode Instruments, File Activity template | Filesystem activity and related process events | Logical filesystem events; Disk Usage and Disk I/O Latency provide storage-level detail | Developer-oriented investigation |
| Windows Performance Monitor | Processes or process instances | IO Write Operations/sec, a write-operation rate |
The cited procedure is documented for supported Windows Server versions, not every Windows 10 or 11 edition |
Linux iotop |
Processes or threads | Live I/O bandwidth and, in accumulated mode, totals since the process or iotop started |
Shows traffic at the process/kernel boundary, not guaranteed NAND writes |
Linux /proc/diskstats or /sys/block/<device>/stat |
The block device as a whole | Cumulative device counters | Useful for drive-level change, but cannot identify the app responsible |
macOS: rank writers in Activity Monitor
Open the Disk view
- Open Activity Monitor from Applications > Utilities.
- Select the Disk tab.
- Locate the columns that report data read and data written. Click the data-written column to sort it, if your macOS version offers a sortable heading.
- Watch the list for a defined interval rather than judging a single refresh. Record the top processes at the beginning and end of the interval, along with the displayed values.
Activity Monitor is the quickest way to see which currently running process is generating disk traffic. A process at the top during one refresh is not necessarily the largest writer over an hour: a short burst can move it up temporarily, while a slower background job can accumulate more data over time.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Make the comparison meaningful
- Use the same start and end times for every process you compare.
- Capture a quiet baseline, then repeat while the workload that concerns you is running.
- Note the process name exactly. A helper process or child process may perform the writes instead of the main app window.
- Do not treat the displayed amount as a lifetime total. Activity Monitor reports observed system activity, not an app’s complete history since installation.
Investigate a difficult case with Instruments
When Activity Monitor identifies a busy process but not the files or operations behind it, Apple documents Xcode Instruments’ File Activity template. Its Filesystem Activity instrument records logical filesystem events. The template also includes Disk Usage and Disk I/O Latency, which expose storage behavior at a different layer.
- Launch Instruments with Xcode installed.
- Choose the File Activity template.
- Start a recording while reproducing the write-heavy action.
- Use the filesystem events to associate activity with the responsible process and operation, then inspect Disk Usage or Disk I/O Latency when the question is about storage behavior rather than just a file event.
- Stop the recording and compare the same interval across processes or actions.
Logical filesystem activity and physical disk writes do not correspond one-for-one. Instruments is therefore a way to explain what an app requested and how storage responded, not a guarantee of the number of NAND cells programmed for that app.
Windows: use Performance Monitor to locate process writers
Add the documented process counter
- Press Win+R, enter
perfmon, and open Performance Monitor. - In the navigation pane, select Monitoring Tools > Performance Monitor.
- Click the green + button to add a counter.
- Choose the Process performance object.
- Select
IO Write Operations/sec. Add the process instance or instances you want to observe, or use the all-instances option where available, then click Add and OK. - Observe the counter while reproducing the workload and record values over the same interval for each process.
Microsoft’s guidance uses Process(*)IO Write Operations/sec to correlate process activity with storage activity. The counter is an operation rate, not a byte counter. A process issuing many small writes can therefore score higher than one issuing fewer, larger writes. Use it to find likely writers and to correlate them with the storage symptoms you are investigating; do not present its value as megabytes written or as SSD wear.
Recommended Free Tools
Respect the Windows edition boundary
The cited Performance Monitor procedure is scoped to supported Windows Server versions. The counter architecture may exist elsewhere, but the documentation does not confirm identical behavior or UI steps for every Windows 10 or Windows 11 edition. If you are on a consumer edition, treat this as a diagnostic approach to verify on your own system rather than as a universal guarantee.
Interpret system and kernel activity carefully
A process counter can show a generic system or kernel-related instance rather than the user application that initiated the work. Kernel activity has different visibility from user-mode activity, so an apparently unattributed writer may reflect buffering, filesystem work or another operation below the app boundary. Record the label you actually observe instead of assigning the activity to a particular app without evidence.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Short storage-latency spikes are not automatically evidence of a sustained write problem. The Windows guidance recommends investigating longer periods when diagnosing storage behavior; it does not establish a universal write-volume threshold that is safe or unsafe for every SSD.
Linux: use iotop for live and accumulated process activity
Start a live view
- Open a terminal.
- Run
sudo iotop. Administrative privileges are commonly required to see all processes and their I/O. - Watch the per-process or per-thread bandwidth columns while the workload runs.
- Sort by the write column in the interface so the largest current writers are together.
iotop displays I/O bandwidth by process or thread. This live view answers “who is writing right now?” It is especially useful for catching bursts that disappear before a slower system monitor refreshes.
Use accumulated mode for an interval total
The tool also documents an accumulated mode. It reports amounts since the process or iotop session started, allowing you to compare total observed writes over a controlled interval rather than comparing one instantaneous bandwidth value. Start the session immediately before the workload, let it run for the same duration for each test, and then rank the accumulated write amounts.
Accumulated mode is still an observation-window total. It is not a lifetime counter and does not reconstruct what a process wrote before iotop started.
Narrow the view when many processes are active
iotop supports process-only display and filters. Use those controls to remove kernel threads or focus on a selected process set when the default list is too noisy. Keep a note of the filter and mode used, because changing either changes what your ranking means.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Check the drive-level counters separately
Linux exposes block-device statistics in /proc/diskstats and in /sys/block/<device>/stat. These counters describe the device, not the originating application. Take two snapshots around the same workload and compare the change to determine how much device activity occurred during the interval. Select the correct device name first; a system with multiple SSDs, partitions or mapped devices can otherwise lead you to compare the wrong counter.
Device counters are normally cumulative and monotonic during ordinary operation, but they can reset after a reboot, device reattachment, device reinitialization or counter overflow. Label every snapshot with its timestamp and boot or attachment context before calculating a difference.
Build a ranking you can defend
1. Define the question and interval
Choose either a live-rate ranking or an accumulated ranking. Then choose one observation window and apply it to every process. A one-minute capture, a ten-minute capture and an overnight capture answer different questions; do not mix their results.
2. Capture a baseline
Record activity when the computer is idle enough to represent normal background behavior. This reveals whether the suspected writer is present continuously or appears only during a particular action.
3. Reproduce one workload
Start the monitor before launching the backup, export, build, download, synchronization job or other operation you want to test. Keep unrelated activity as consistent as practical, and record the start and stop times.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
4. Rank the correct quantity
- Use bandwidth for “largest writer at this moment.”
- Use accumulated bytes or amounts for “largest writer during this test.”
- Use Windows’
IO Write Operations/secspecifically as an operation-rate signal, not as a byte total. - Use device counters only to validate total drive-level change, never to assign that change to one app.
5. Keep process identity with the result
Save the executable or process name, process ID when available, operating-system version, drive being monitored, mode, filter and interval. If a helper process performed the write, report that helper rather than silently merging it with the parent app.
6. Repeat before changing configuration
Repeat a suspected result at least once under the same conditions. A single spike can be a scheduled task, cache flush or unrelated background event. A repeated pattern during the same workload is stronger evidence than one high sample.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why app-level writes do not equal physical SSD writes
Several layers sit between an app and NAND
An application issues file operations. The filesystem may combine, split or reorder them; the operating system and storage stack may cache them; and the SSD controller schedules its own flash writes. The process monitor can therefore report traffic at a different boundary from the block device, while the device counter reports activity after some of those transformations.
The iotop manual distinguishes total bandwidth between processes or kernel threads and the kernel block-device subsystem from traffic between that subsystem and the underlying hardware. Caching and I/O reordering can make those figures differ.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Block writes amplify small changes
Apple’s storage documentation gives a technical example in which the controller writes in blocks, frequently 4 KB. A one-byte file change can consequently result in a block write. That example explains the mechanism; it is not a measured average for every Mac, filesystem or SSD.
Do not convert monitoring data into app-by-app TBW
Drive health tools can expose device-level wear or total-write information, but the available operating-system methods do not provide a universal way to divide that lifetime physical total among applications. You can identify which process generated the most observed I/O during a test; you cannot claim that process caused an exact share of the SSD’s lifetime TBW without a device- and workload-specific accounting method that these monitors do not supply.
What to do when the result looks wrong
The top writer changes every refresh
Switch from a live snapshot to an accumulated interval, or record repeated samples and compare totals over the same duration. Fast bursts and slow sustained writers are different patterns.
Only a system or kernel label appears
That label may be the layer visible to the monitor rather than the original app. Reproduce the workload with fewer background tasks, inspect child processes where the tool permits it, and report the unattributed label honestly if the monitor cannot trace it further.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The device total rises more than process totals
That difference is expected when buffering, reordering, filesystem behavior or block-level writes amplify physical activity. Check that the process and device snapshots cover exactly the same interval and that you monitored the intended device.
The Linux total went backwards or restarted
Check for a reboot, device reattachment, reinitialization or counter overflow. Start a new, clearly timestamped pair of snapshots after the reset instead of subtracting values from different counter lifetimes.
A brief spike causes concern
Repeat the measurement over a longer period that includes the complete workload. A short spike alone does not establish sustained write volume or imminent SSD failure, and there is no universal threshold in the cited guidance that applies to every drive.
Quick Recap
Practical method by goal
| Your goal | Use first | Result to record |
|---|---|---|
| Find the busiest Mac process now | Activity Monitor > Disk | Process name and observed data-written value over a stated interval |
| Explain which Mac operation is generating events | Instruments > File Activity | Filesystem event and process identity, with storage instruments for context |
| Locate a Windows Server process associated with writes | Performance Monitor and Process(*)IO Write Operations/sec |
Operation-rate samples, process instance and matching storage symptoms |
| Rank Linux writers during a workload | iotop live or accumulated mode |
Process/thread, mode, filter and interval total or bandwidth |
| Measure total Linux device change | /proc/diskstats or /sys/block/<device>/stat |
Two timestamped device-counter snapshots and their difference |
| Estimate which app caused lifetime SSD wear | No universal app-level method supplied by these monitors | Keep the conclusion at observed process activity; do not assign exact lifetime TBW shares |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems
