MacOS Gatekeeper Security Features

A change to the MacOS Gatekeeper security feature for the upcoming major feature update is already causing a lot of confusion. It primarily affects unsigned applications.

Gatekeeper security improvements

MacOS Gatekeeper is similar to Microsoft’s Smart App Control tool in Windows. The tool is designed to ensure that only trusted software runs on a Mac – this security feature was introduced back in 2012. Since then, there have been numerous changes and often these changes have ended up with users not being aware of them and then noticing problems with their software. With the update in MacOS Sequoia, which is due to be completed in the fall, Gatekeeper will be even more secure by making it (again) more difficult to run unsigned software.

While this change should be welcomed by many users, it could also upset an equally large cross-section of users, as the previously easy way to open unsigned apps will become much more cumbersome. Previously, it was possible to bypass Gatekeeper protection by clicking on an app with the Control key. This quick bypass option will now be removed. Apple explains: “In macOS Sequoia, users can no longer click the ‘Ctrl’ button to override Gatekeeper when opening software that is not properly signed or notarized. They must visit System Preferences > Privacy & Security to review the security information for the software before it can run.” This change will not make it impossible to run unsigned software, but it will make it significantly more cumbersome.

Properly signed and verified apps

Users who get their software from the Mac App Store will not even notice these changes. The Mac App Store ensures that all apps are correctly signed and verified, so that only apps that meet all the requirements are delivered. However, there are numerous developers who do not distribute their software through the Mac App Store. This can be due to various reasons, such as specific licensing models or business strategies.

For these developers, Apple now strongly recommends that they “notarize” their software. Notarization then ensures that an app can run without Gatekeeper raising the alarm. This in turn means that developers submit their software to Apple, where it is checked for malware and given a special ticket. This confirms that the app is safe. Notarization is an important step to ensure user safety without compromising user experience. Developers should prepare for these changes in good time to ensure that their software also runs smoothly under MacOS Sequoia. However, this will probably still lead to some disputes.