Short version: the message "macOS cannot verify that this app is free of malware" is Gatekeeper doing its job. It does not mean the app is malware — it means Apple could not confirm who made the app or that it was checked (notarized). Below is what it really means, how to decide whether it is safe, and the correct order to open it if you trust it.
What the message actually means
Every app you download from outside the App Store carries a "quarantine" flag. Before the app runs the first time, macOS (Gatekeeper) checks two things: a valid Developer ID signature and Apple notarization (an automated malware scan Apple runs on the developer's behalf). If either check fails or is missing, you get this warning instead of the app opening.
Common, harmless reasons you would see it:
- A small or open-source developer who did not pay for an Apple Developer ID.
- An older app built before notarization existed (pre-2019).
- A file that lost its signature in transit (re-zipped, emailed, or synced).
Before you override: is the app actually trustworthy?
Gatekeeper is a real safety layer, so pause before bypassing it. Only continue if all of these are true:
- You downloaded it from the developer's official website or a repository you trust — not a random link, ad, or "free download" mirror.
- You went looking for this app on purpose. (If it showed up on its own, stop — do not open it.)
- The app is well-known or the developer is verifiable (a real company, an established open-source project).
If any of those are shaky, do not override the warning. Delete the file. A pirated or "cracked" copy of a paid app is one of the most common ways real Mac malware spreads.
The safe way to open a trusted app (in order)
Fix 1 — Right-click, then Open
Do not double-click. Instead right-click (or Control-click) the app and choose Open. You will get the same warning but now with an Open button. Click it once and macOS remembers your choice for that app. This is the safest method because it is a per-app exception, not a system-wide change.
Fix 2 — System Settings, then "Open Anyway"
On macOS Ventura and later: open System Settings, then Privacy & Security, scroll to the Security section. Just after you tried to open the app, you will see a line like "[App] was blocked to protect your Mac" with an Open Anyway button. Click it, authenticate with Touch ID or your password, and confirm. (On macOS Monterey and earlier the same control lives in System Preferences, then Security & Privacy, then the General tab.)
Fix 3 — Clear the quarantine flag (Terminal, advanced)
If the two steps above do not appear, the app still carries a quarantine attribute you can remove manually. Open Terminal and run:
xattr -d com.apple.quarantine /path/to/AppName.app
(Type xattr -d com.apple.quarantine with a trailing space, then drag the app onto the Terminal window to fill in the path, then press Return.) This only removes the "downloaded from the internet" flag — it does not disable Gatekeeper. Use it only on an app you have already decided to trust.
What you should NOT do
You may find advice to run sudo spctl --master-disable to bring back the old "Anywhere" option. Don't. That turns Gatekeeper off for every app on your Mac, permanently, and leaves you exposed to genuinely malicious software. The per-app methods above give you the same result for the one app you need — without lowering your Mac's guard everywhere else.
Still blocked after all three?
If the app opens then immediately quits, or macOS insists it is "damaged," that is usually a different Gatekeeper state — see our guide on fixing "App Is Damaged and Can't Be Opened" on Mac. If an Intel-only app refuses to launch on an Apple silicon Mac, you may just need Rosetta 2 — see how to run an Intel app on Apple silicon.
The bigger picture: is your Mac too old to run the app safely?
Sometimes the real problem is that the app needs a newer macOS than your machine can install, and you are chasing workarounds on hardware that has aged out. If you are fighting security prompts on an old Intel MacBook, a refurbished Apple silicon Mac fixes it permanently and stays on the current macOS for years. A certified MacBook Air (M1) starts at just $569.99 in our Apple clearance lineup, and every machine ships with a one-year warranty and free shipping.
FAQ
Does clicking "Open Anyway" turn off my Mac's security? No. It creates an exception for that one app only. Gatekeeper still checks every other app you download.
Is the app really malware if I see this? Not necessarily — the message means macOS could not verify it, not that it found something bad. The risk depends entirely on where you got it.
Is the xattr Terminal command safe? It is safe on an app you trust — it only strips the quarantine flag. Do not run broad "disable Gatekeeper" commands.
Why did a well-known app trigger this? Usually the download lost its signature (re-zipped or synced), or you got it from a mirror instead of the official site. Re-download from the developer directly and the warning often disappears.