If you’ve ever tried to open a macOS application downloaded outside of the App Store, you would’ve met Apple’s Gatekeeper. The strict security tool acts as your Mac’s bouncer, warning you when software looks shifty and denying access to apps that are likely to cause trouble.
Gatekeeper is one of many built-in macOS features that help keep you, your data, and your computer safe. Let’s take an in-depth look at Apple’s stern but fair virtual security guard.
How Gatekeeper Works
Whenever you open an application for the first time, macOS determines whether or not Apple has verified the software. Naturally, App Store apps always launch without issue, but Gatekeeper prevents all unknown apps from opening. Even applications from identified developers can produce warnings when first encountered, depending on your security settings, and you may need to authorize their use.
Gatekeeper behavior varies based on several factors, including your settings, where an app came from, and an app’s verification status. Apple uses a notarization process to flag software as safe and places applications into three categories: App Store, identified, and unknown. Let’s take a closer look at the three classifications.
Applications From the App Store
App Store apps are as safe as it gets. Completely verified and considered free of malware, software downloaded directly from Apple always passes Gatekeeper. If you’re uncertain about using the internet and don’t want to misstep, the App Store is the best place to get safe applications.
Notarized Applications From Identified Developers
When you require software that isn’t available on the App Store, you need to search elsewhere. Downloading an application directly from the developer is common practice, and Apple offers a way for software manufacturers to satisfy macOS Gatekeeper and avoid alarming users. Notarized software—even when sourced outside of the App Store—carries a certain safety guarantee and is generally fine to launch.
Unverified Applications
When software hasn’t gone through Apple’s notarization process, the situation becomes uncertain. In these cases, Gatekeeper will always issue a warning and attempt to block applications from launching. However, you shouldn’t automatically consider an app that hasn’t undergone Apple’s verification process to be harmful.
Many developers don’t submit their software for notarization, and plenty of safe applications can anger Gatekeeper. When opening unverified software, you should use your best judgement. If you know and trust the developer, you can bypass Gatekeeper to sidestep macOS’s security and permit an application to launch. We’ll discuss methods for bypassing Gatekeeper soon.
Gatekeeper Notarization Explained
Notarization is the key to pleasing Gatekeeper. Apple’s rigorous verification process allows the company to confidently distribute virus-free software on its App Store and vouch for other third-party applications found elsewhere.
When a developer submits an application for notarization, an automated process scans the submission for malware and checks for code-signing issues. If an app passes the test, Apple provides a ticket of authentication to attach to the software.
Because Gatekeeper warnings can be off-putting and steer people away from legitimate applications, completing the verification process is worthwhile for many developers. Disk images, installer packages, and other bundles can all undergo the notarization process, which means the verification program covers most common software delivery methods.
Gatekeeper Settings
You can access your Gatekeeper settings in System Preferences > Security & Privacy > General. From here, you have the option to Allow apps downloaded from two locations: App Store or App Store and identified developers. To make any changes, you’ll need to unlock the security padlock in the bottom-left corner.
In earlier versions of macOS, you had the option to allow apps from Anywhere. This settings effectively stood Gatekeeper down and let you freely launch software regardless of where it came from. Apple removed that settings in later iterations of its operating system. You can, however, restore the legacy entry with a Terminal command—which isn’t something we recommend unless absolutely necessary.
Generally, the App Store and identified developers setting is ideal for most of us, but you can utilize the more restrictive App Store option if you want to further secure your Mac. Tighter security measures are useful when children or less tech-savvy people are using the Mac.
How to Bypass Gatekeeper
Gatekeeper can be overprotective at times and get in the way of a good thing. You may download applications you know to be safe but that haven’t undergone the notarization process. In these cases, a message like this will appear when you try to launch the app: “Application” can’t be opened because Apple cannot check it for malicious software.
Fortunately, sidestepping security is simple once you know how. In recent versions of macOS, you have several options for bypassing Gatekeeper.
Bypass Gatekeeper Using the Control-Click Method
Perhaps the simplest way to circumvent Apple’s heavy-handed Gatekeeper is by launching software from the Control-click menu. To open an unverified application, follow these steps:
- Locate the app or installer in Finder.
- Control-click the item.
- Choose Open from the Control-click menu.
- Click Open when the warning dialog box appears.
Bypass Gatekeeper Through the System Preferences
Alternatively, you can allow apps Gatekeeper prevents from opening within your Security & Privacy preferences. To permit a blocked application to launch, follow these steps:
- Navigate to System Preferences > Security & Privacy > General.
- Locate details about the blocked app under Allow apps downloaded from.
- Click Open Anyway.
In most situations, either of the two bypass methods discussed should get you past Gatekeeper. Disabling the security measure with a Terminal command is also an option but rarely necessary. Gatekeeper is here to help, and we should heed its warnings when appropriate.
Gatekeeper Is Your Friend
Safety and security are prime features of macOS, and tools like Gatekeeper help keep your device free of malicious software. While apps downloaded from the App Store get a free pass, offerings from other developers may require you to vouch for them.
Notarization is the key to pleasing Gatekeeper, and Apple puts submitted software through a rigorous verification process. Even with this security measure active, you still have the freedom to bypass the bouncer when necessary, but you should always be cautious when doing so.
Security features in macOS seek to provide safety while maintaining the functionality of your device. In an increasingly online world, every extra layer of protection is valuable, and Gatekeeper is just one of many tools designed to keep you safe when using your Mac.