How to Fix “Can’t Be Opened Because Apple Cannot Check It for Malicious Software”: Safe ways to open an app in macOS
27 April 2025 Senior Program Developer
Last update by William Davis at 10 October 2026
Summary
This article outlines the technical causes behind the mac can't check for malicious software warning and details standard macOS security protocols like Gatekeeper. It provides structured, step-by-step solutions ranging from Finder context menus to Terminal commands for safely executing unverified applications.
This message comes from Gatekeeper, Apple’s built-in security feature that checks whether an app is from an identified developer and whether Apple has notarized it.
Important: This warning does not mean your Mac has found malware. It means Apple couldn’t verify the app’s safety in the usual way.
You can typically proceed only if you’re confident the app is safe, for example:
- You downloaded it directly from the developer’s official website
- The version matches what the developer provides
- A file checksum or signature (if available) matches
- You were expecting this exact app
Do not open the app if:
- The file came from an unknown or untrusted source
- You downloaded it from a mirror, forum, or file-sharing site
- It includes cracks, patches, or modified installers
- The filename, icon, or version looks suspicious
This warning is common for apps downloaded outside the App Store, such as open-source tools, media players, PDF utilities, and niche software.
Tip: Before trying the steps below, move the app into your Applications folder. This increases the chance that the standard Mac approval methods will work.
If you are still unsure whether an app or installer is safe, you can run a quick scan using an online malware analysis service such as VirusTotal before opening it. This can provide additional information to help you evaluate potential risks, but it should not be considered a substitute for macOS security features such as Gatekeeper.
Use this as an additional layer of verification, not as a guarantee of safety. If the app comes from an untrusted or suspicious source, it is best not to open or install it.
Safety tip: Only bypass this warning if you trust the app’s source. Also, Open Anyway usually appears after you try opening the app once, and may remain available for about 1 hour.
If you want to open the app quickly, start with these two methods.
This is usually the simplest and most reliable way to bypass a Gatekeeper warning for a trusted app.
1. Open Finder.
2. Locate the downloaded app or installer:
- If you have a
.app file, move it to Applications if desired.
- If you downloaded a
.dmg file, open it and drag the app inside to Applications.
- If you downloaded a
.pkg installer, no need to move it. You can run it from its current location.
3. In Finder, locate the app or installer.
4. Hold Control and click the item, then select Open.
5. When the warning dialog appears, click Open again to confirm.
6. Follow any additional installation prompts if required.
Afterward, macOS will usually remember your approval for that app, allowing you to open it normally in the future.
If the app is still blocked, try Method 2: System Settings > Privacy & Security > Open Anyway.
If the Control-click (or right-click) method doesn’t work, you can manually allow the app through macOS security settings.
1. Open the Apple menu and select System Settings or System Preferences.
2. Go to Privacy & Security. On older versions of macOS, select Security & Privacy instead.
3. Scroll down to the Security section.
4. Find the message indicating that the app was blocked from opening.
5. Click Open Anyway.
6. Enter your Mac password or use Touch ID if prompted.
7. In the confirmation dialog, click Open to launch the app.
The Open Anyway button appears only after you have attempted to open the app at least once. The option is typically available for about one hour after the blocked launch attempt.
After you approve the app, macOS remembers your choice, so you should not need to repeat these steps.
If the standard Mac options don’t work, try these more advanced techniques.
macOS adds a quarantine attribute to files downloaded from the internet. Removing it can prevent the warning.
Open Terminal and run the command that matches your situation.
For an app in Applications:
xattr -dr com.apple.quarantine "/Applications/AppName.app"
Replace /Applications/AppName.app with the actual path to your file.
For a command-line tool in
/usr/local/bin:
xattr -d com.apple.quarantine /usr/local/bin/tool
For an entire folder:
xattr -dr com.apple.quarantine "/path/to/folder"
Important:
- If the path contains spaces, wrap it in quotes.
- For a
.dmg or .pkg, install or mount it first, then apply xattr to the installed .app or file.
- If you get a permission error, you may need
sudo.
Example with
sudo:
sudo xattr -dr com.apple.quarantine "/Applications/AppName.app"
This method is best for users comfortable with Terminal. If you need a broader, temporary override, see Temporarily allow apps from anywhere (spctl) — and re‑enable it afterward.
Use this only as a last resort—it relaxes Gatekeeper’s security for all apps.
Open Terminal and run the command that matches your situation.
To temporarily allow apps from anywhere, run:
sudo spctl –master-disable
Open the blocked app.
Once you’re done, immediately re-enable Gatekeeper:
sudo spctl –master-enable
Keep in mind:
- This changes a global security setting.
- Use it only briefly.
- Do not leave it disabled longer than necessary.
If only one app is blocked, the earlier methods are much safer.
Does this mean my Mac has malware?
Why doesn’t the Open Anyway button appear?
Usually because you haven’t tried to open the app yet. First, double-click or use Method 1, then check System Settings > Privacy & Security again. The Open Anyway button typically appears for about 1 hour. On managed work or school Macs, this option may be disabled by policy.
What’s the difference between Apple cannot check…, developer cannot be verified, app is damaged, and will damage your computer?
These are different warnings:
- “Apple cannot check…”: Apple can’t verify the app’s notarization or developer identity.
- “Developer cannot be verified”: The developer’s identity isn’t trusted.
- “App is damaged”: The app may be corrupted or improperly packaged.
- “Will damage your computer”: Much more serious—do not bypass this warning.
If you encounter the other warnings, refer to guides specific to those messages.
Relate Links :
10-10-2026
Amanda J. Brook : This article outlines the technical causes behind the mac can't check for malicious software warning and details standard...
- `;
leftFixedMulu.children[0].children[1].innerHTML = '';
let ml = document.querySelector('.ml');
let eles = ml.getElementsByTagName('*');
let arr = [];
for(let i=0; i
- ${eles[i].innerHTML} `; } } console.log('anchor link:'+arr.toString()); leftFixedMulu.children[0].children[1].innerHTML += '
User Comments
Leave a Comment