Apple Gatekeeper - Revision history

Sojourna at 06:11, 22 March 2026

2026-03-22T06:11:45Z

← Older revision		Revision as of 06:11, 22 March 2026
Line 5:		Line 5:
	\|Description=		\|Description=
	\|InProduction=Yes		\|InProduction=Yes
	\|Logo=Gatekeeper logo.png		\|Logo=Apple Gatekeeper logo.png
	\|ProductLine=		\|ProductLine=
	\|ReleaseYear=2012		\|ReleaseYear=2012

Tempo123: Replace citation [1] Archive.today link with Ghost Archive link

2026-02-23T19:41:30Z

Replace citation [1] Archive.today link with Ghost Archive link

← Older revision		Revision as of 19:41, 23 February 2026
Line 10:		Line 10:
	\|Website=https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web		\|Website=https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web
	}}		}}
	'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|archive-url=https://archive~~.is~~/~~G8sdt~~ \|archive-date=2026-02-06 \|access-date=8 May 2025 \|website=Apple Support}}</ref>		'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|archive-url=https://ghostarchive.org/archive/WNNZd \|archive-date=2026-02-23 \|access-date=8 May 2025 \|website=Apple Support}}</ref>

	==Consumer impact summary==		==Consumer impact summary==

Bananabot: Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

2026-02-22T21:47:29Z

Re-archived 1 citation(s) from archive.today to web.archive.org using CRWCitationBot

← Older revision		Revision as of 21:47, 22 February 2026
Line 34:		Line 34:

	===Hidden "Anywhere" option (2016)===		===Hidden "Anywhere" option (2016)===
	In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers. <ref>{{Cite web \|last=Degtiarenko \|first=Igor \|date=2025-01-10 \|title=Want to allow app downloads from anywhere? Here's how \|url=https://macpaw.com/how-to/allow-apps-anywhere \|url-status=live \|archive-url=http://web.archive.org/web/20251130090053/https://macpaw.com/how-to/allow-apps-anywhere \|archive-date=30 Nov 2025\|access-date=2026-02-06 \|website=MacPaw}}</ref><ref>{{Cite web \|date=2025-04-22 \|title=How to Allow Opening Apps from Anywhere in MacOS Sequoia, Sonoma \|url=https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|url-status=live \|archive-url=https://~~archive~~.is/~~pa5gU~~ \|archive-date=2026~~-02-06~~ \|access-date=2026-02-06 \|website=OSXDaily}}</ref><!-- John in OSXDaily also provides an (unsourced) per-app override command, visible in that archive -->		In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers. <ref>{{Cite web \|last=Degtiarenko \|first=Igor \|date=2025-01-10 \|title=Want to allow app downloads from anywhere? Here's how \|url=https://macpaw.com/how-to/allow-apps-anywhere \|url-status=live \|archive-url=http://web.archive.org/web/20251130090053/https://macpaw.com/how-to/allow-apps-anywhere \|archive-date=30 Nov 2025\|access-date=2026-02-06 \|website=MacPaw}}</ref><ref>{{Cite web \|date=2025-04-22 \|title=How to Allow Opening Apps from Anywhere in MacOS Sequoia, Sonoma \|url=https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|url-status=live \|archive-url=http://web.archive.org/web/20260222211457/https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|archive-date=22 Feb 2026\|access-date=2026-02-06 \|website=OSXDaily}}</ref><!-- John in OSXDaily also provides an (unsourced) per-app override command, visible in that archive -->

	===Mandatory notarization requirement (2019)===		===Mandatory notarization requirement (2019)===

Bananabot: Re-archived 5 citation(s) from archive.today to web.archive.org using CRWCitationBot

2026-02-22T21:15:29Z

Re-archived 5 citation(s) from archive.today to web.archive.org using CRWCitationBot

← Older revision		Revision as of 21:15, 22 February 2026
Line 34:		Line 34:

	===Hidden "Anywhere" option (2016)===		===Hidden "Anywhere" option (2016)===
	In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers. <ref>{{Cite web \|last=Degtiarenko \|first=Igor \|date=2025-01-10 \|title=Want to allow app downloads from anywhere? Here's how \|url=https://macpaw.com/how-to/allow-apps-anywhere \|url-status=live \|archive-url=https://~~archive~~.is/~~wip~~/~~5XYcr~~ \|archive-date=~~2026-02-06~~ \|access-date=2026-02-06 \|website=MacPaw}}</ref><ref>{{Cite web \|date=2025-04-22 \|title=How to Allow Opening Apps from Anywhere in MacOS Sequoia, Sonoma \|url=https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|url-status=live \|archive-url=https://archive.is/pa5gU \|archive-date=2026-02-06 \|access-date=2026-02-06 \|website=OSXDaily}}</ref><!-- John in OSXDaily also provides an (unsourced) per-app override command, visible in that archive -->		In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers. <ref>{{Cite web \|last=Degtiarenko \|first=Igor \|date=2025-01-10 \|title=Want to allow app downloads from anywhere? Here's how \|url=https://macpaw.com/how-to/allow-apps-anywhere \|url-status=live \|archive-url=http://web.archive.org/web/20251130090053/https://macpaw.com/how-to/allow-apps-anywhere \|archive-date=30 Nov 2025\|access-date=2026-02-06 \|website=MacPaw}}</ref><ref>{{Cite web \|date=2025-04-22 \|title=How to Allow Opening Apps from Anywhere in MacOS Sequoia, Sonoma \|url=https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|url-status=live \|archive-url=https://archive.is/pa5gU \|archive-date=2026-02-06 \|access-date=2026-02-06 \|website=OSXDaily}}</ref><!-- John in OSXDaily also provides an (unsourced) per-app override command, visible in that archive -->

	===Mandatory notarization requirement (2019)===		===Mandatory notarization requirement (2019)===
	In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>{{Cite web \|last=Stokes \|first=Phil \|date=11 Sep 2019 \|title=What is macOS Notarization? – An Easy Guide 101 \|url=https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|url-status=live \|archive-url=https://~~archive~~.is/~~mbeuB~~ \|archive-date=~~2026-02-06~~ \|access-date=7 May 2025 \|website=SentinelOne Blog}}</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.		In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>{{Cite web \|last=Stokes \|first=Phil \|date=11 Sep 2019 \|title=What is macOS Notarization? – An Easy Guide 101 \|url=https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|url-status=live \|archive-url=http://web.archive.org/web/20251115021107/https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|archive-date=15 Nov 2025\|access-date=7 May 2025 \|website=SentinelOne Blog}}</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.

	===Achilles vulnerability (2022)===		===Achilles vulnerability (2022)===
	In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>{{Cite web \|date=19 Dec 2022 \|title=Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability \|url=https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|url-status=live \|archive-url=https://~~archive~~.is/~~gUouW~~ \|archive-date=2026~~-02-06~~ \|access-date=7 May 2025 \|website=Microsoft Security}}</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.		In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>{{Cite web \|date=19 Dec 2022 \|title=Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability \|url=https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|url-status=live \|archive-url=http://web.archive.org/web/20260217103531/https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|archive-date=17 Feb 2026\|access-date=7 May 2025 \|website=Microsoft Security}}</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.

	===Developer signing requirement barriers (ongoing)===		===Developer signing requirement barriers (ongoing)===
	Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>{{Cite web \|last=@vish90 \|date=Jul 2019 \|title=App notarized but Gatekeeper still shows app as untrusted \|url=https://developer.apple.com/forums/thread/120016 \|url-status=live \|archive-url=https://~~archive~~.is/~~zXgiG~~ \|archive-date=~~2026-02-06~~ \|access-date=8 May 2025 \|website=Apple Developer Forum}}</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.		Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>{{Cite web \|last=@vish90 \|date=Jul 2019 \|title=App notarized but Gatekeeper still shows app as untrusted \|url=https://developer.apple.com/forums/thread/120016 \|url-status=live \|archive-url=http://web.archive.org/web/20250818022059/https://developer.apple.com/forums/thread/120016 \|archive-date=18 Aug 2025\|access-date=8 May 2025 \|website=Apple Developer Forum}}</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.

	===Blocked legacy software (ongoing)===		===Blocked legacy software (ongoing)===
	With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>{{Cite web \|last=@paolo \|date=21 Aug 2012 \|title=Gatekeeper and the rise of the Total Apple Consumer \|url=https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|url-status=live \|archive-url=https://~~archive~~.is/~~Kwmdf~~ \|archive-date=~~2026-02-06~~ \|access-date=8 May 2025 \|website=www.molleindustria.org}}</ref>		With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>{{Cite web \|last=@paolo \|date=21 Aug 2012 \|title=Gatekeeper and the rise of the Total Apple Consumer \|url=https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|url-status=live \|archive-url=http://web.archive.org/web/20250826010917/https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|archive-date=26 Aug 2025\|access-date=8 May 2025 \|website=www.molleindustria.org}}</ref>

	===Internet connection requirement controversy (ongoing)===		===Internet connection requirement controversy (ongoing)===

Raster: Archived links and replaced Wikipedia citation (No Patrick,Wikipedia is not a valid Citation (source)). Page could use more citations tho

2026-02-06T08:27:58Z

Archived links and replaced Wikipedia citation (No Patrick,Wikipedia is not a valid Citation (source)). Page could use more citations tho

Bythmusters: Added Cargo template in place of Infobox, moved to Product

2026-01-29T19:21:43Z

Added Cargo template in place of Infobox, moved to Product

← Older revision		Revision as of 19:21, 29 January 2026
Line 1:		Line 1:
	{{~~InfoboxProductLine~~		{{ProductCargo
	\| ~~Title~~ = ~~Gatekeeper~~		\|ArticleType=Product
	\| ~~Release Year~~ = ~~2012~~		\|Category=Security, Software
	\| ~~Product Type~~ = ~~Security Technology~~		\|Company=Apple
	\| ~~In Production~~ = Yes		\|Description=
	\| ~~Official~~ Website = https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web		\|InProduction=Yes
	~~\| Logo =Gatekeeper logo.png~~		\|Logo=Gatekeeper logo.png
			\|ProductLine=
			\|ReleaseYear=2012
			\|Website=https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web
	}}		}}
	'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|access-date=8 May 2025 \|website=Apple Support}}</ref>		'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|access-date=8 May 2025 \|website=Apple Support}}</ref>

Emanuele: reference formatting

2025-05-08T19:48:53Z

reference formatting

← Older revision		Revision as of 19:48, 8 May 2025
Line 5:		Line 5:
	\| In Production = Yes		\| In Production = Yes
	\| Official Website = https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web		\| Official Website = https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web
	\| Logo =		\| Logo =Gatekeeper logo.png
	}}		}}
	'''Gatekeeper''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">~~Apple Support. "~~Gatekeeper and runtime protection in macOS." https://support.apple.com/guide/security/~~gatekeeper-and-runtime-protection-~~sec5599b66df/web</ref>		'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|access-date=8 May 2025 \|website=Apple Support}}</ref>

	==Consumer impact summary==		==Consumer impact summary==
Line 31:		Line 31:

	===Hidden "Anywhere" option (2016)===		===Hidden "Anywhere" option (2016)===
	In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers.<ref>~~Wikipedia. "~~Gatekeeper (macOS)." https://en.wikipedia.org/wiki/Gatekeeper_(macOS)</ref>		In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers.<ref>{{Cite web \|title=Gatekeeper (macOS) \|url=https://en.wikipedia.org/wiki/Gatekeeper_(macOS) \|url-status=live \|access-date=8 May 2025 \|website=Wikipedia}}</ref>

	===Mandatory notarization requirement (2019)===		===Mandatory notarization requirement (2019)===
	In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>~~SentinelOne. "~~What is macOS Notarization? ~~Security Hardening or Security Theater?" September 11, 2019.~~ https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.		In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>{{Cite web \|last=Stokes \|first=Phil \|date=11 Sep 2019 \|title=What is macOS Notarization? – An Easy Guide 101 \|url=https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|url-status=live \|access-date=7 May 2025 \|website=SentinelOne Blog}}</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.

	===Achilles vulnerability (2022)===		===Achilles vulnerability (2022)===
	In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>~~Microsoft Security Blog. "Gatekeeper's~~ Achilles heel: Unearthing a macOS vulnerability~~." December 19, 2022.~~ https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.		In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>{{Cite web \|date=19 Dec 2022 \|title=Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability \|url=https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|url-status=live \|access-date=7 May 2025 \|website=Microsoft Security}}</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.

	===Developer signing requirement barriers (ongoing)===		===Developer signing requirement barriers (ongoing)===
	Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>~~Apple Developer. "~~App notarized but Gatekeeper still shows ~~warning."~~ https://~~forums.~~developer.apple.com/forums/thread/120016</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.		Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>{{Cite web \|last=@vish90 \|date=Jul 2019 \|title=App notarized but Gatekeeper still shows app as untrusted \|url=https://developer.apple.com/forums/thread/120016 \|url-status=live \|access-date=8 May 2025 \|website=Apple Developer Forum}}</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.

	===Blocked legacy software (ongoing)===		===Blocked legacy software (ongoing)===
	With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>~~Molleindustria. "~~Gatekeeper and the rise of the Total Apple Consumer." https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/</ref>		With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>{{Cite web \|last=@paolo \|date=21 Aug 2012 \|title=Gatekeeper and the rise of the Total Apple Consumer \|url=https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|url-status=live \|access-date=8 May 2025 \|website=www.molleindustria.org}}</ref>

	===Internet connection requirement controversy (ongoing)===		===Internet connection requirement controversy (ongoing)===
Line 50:		Line 50:

	==See also==		==See also==
	* [[Right to Repair]]		*[[Right to Repair]]
	* [[Walled Garden Ecosystems]]		*[[Walled Garden Ecosystems]]

	==References==		==References==

Nullpoint420: Created Apple Gatekeeper page

2025-05-08T15:29:49Z

Created Apple Gatekeeper page

New page

{{InfoboxProductLine
| Title = Gatekeeper
| Release Year = 2012
| Product Type = Security Technology
| In Production = Yes
| Official Website = https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web
| Logo =
}}
'''Gatekeeper''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">Apple Support. "Gatekeeper and runtime protection in macOS." https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web</ref>

==Consumer impact summary==

===User Freedom===

Gatekeeper restricts users' ability to install and run software of their choice by default, requiring extra steps to run non-Apple-approved applications and creating a closed ecosystem that limits choice.

===User Privacy===

While positioned as protecting privacy, Gatekeeper requires online verification of apps, which involves sending data to Apple's servers about software usage patterns.

===Business Model===

The technology reinforces Apple's walled garden approach, directing users to the App Store ecosystem where Apple collects a 15-30% commission on all software sales.

===Market Control===

By implementing increasingly strict security measures, Apple has gained significant control over which software developers can effectively distribute applications to Mac users, potentially stifling competition and innovation.

==Incidents==
This is a list of all consumer protection incidents related to this product.

===Hidden "Anywhere" option (2016)===
In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers.<ref>Wikipedia. "Gatekeeper (macOS)." https://en.wikipedia.org/wiki/Gatekeeper_(macOS)</ref>

===Mandatory notarization requirement (2019)===
In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>SentinelOne. "What is macOS Notarization? Security Hardening or Security Theater?" September 11, 2019. https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.

===Achilles vulnerability (2022)===
In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>Microsoft Security Blog. "Gatekeeper's Achilles heel: Unearthing a macOS vulnerability." December 19, 2022. https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.

===Developer signing requirement barriers (ongoing)===
Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>Apple Developer. "App notarized but Gatekeeper still shows warning." https://forums.developer.apple.com/forums/thread/120016</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.

===Blocked legacy software (ongoing)===
With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>Molleindustria. "Gatekeeper and the rise of the Total Apple Consumer." https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/</ref>

===Internet connection requirement controversy (ongoing)===
{{Main|macOS Online Verification Requirements}}
Gatekeeper's notarization verification process requires an internet connection, which has caused issues for users in environments without reliable internet access or those who prefer to work offline for privacy reasons. This requirement has been criticized as an unnecessary limitation that treats users' computers as terminals requiring constant verification rather than personal property under the user's control.

==See also==
* [[Right to Repair]]
* [[Walled Garden Ecosystems]]

==References==
{{reflist}}

[[Category:Gatekeeper]]
[[Category:Apple]]

← Older revision		Revision as of 08:27, 6 February 2026
Line 10:		Line 10:
	\|Website=https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web		\|Website=https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web
	}}		}}
	'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|access-date=8 May 2025 \|website=Apple Support}}</ref>		'''[[wikipedia:Gatekeeper_(macOS)\|Gatekeeper]]''' is a security technology built into Apple's macOS operating system designed to ensure that only trusted software runs on a user's Mac computer. First introduced in Mac OS X Mountain Lion (10.8) in 2012, Gatekeeper checks applications downloaded from the internet for known malicious content before allowing them to run. While promoted as a security feature to protect users from malware, Gatekeeper has also been criticized for restricting user freedom and reinforcing Apple's control over software distribution.<ref name=":0">{{Cite web \|title=Gatekeeper and runtime protection in macOS \|url=https://support.apple.com/guide/security/sec5599b66df/web \|url-status=live \|archive-url=https://archive.is/G8sdt \|archive-date=2026-02-06 \|access-date=8 May 2025 \|website=Apple Support}}</ref>

	==Consumer impact summary==		==Consumer impact summary==
Line 34:		Line 34:

	===Hidden "Anywhere" option (2016)===		===Hidden "Anywhere" option (2016)===
	In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers.<ref>{{Cite web \|title=~~Gatekeeper (macOS)~~ \|url=https://en.~~wikipedia~~.~~org~~/~~wiki~~/~~Gatekeeper_(macOS)~~ \|url-status=live \|access-date=~~8 May 2025~~ \|website=~~Wikipedia~~}}</ref>		In macOS Sierra (10.12), Apple removed the "Allow applications downloaded from: Anywhere" option from the Security & Privacy settings, making it harder for users to disable Gatekeeper restrictions. While technically still possible to disable through Terminal commands, this change represents a deliberate effort to obscure user choice and make it more difficult for average users to exercise control over their own computers. <ref>{{Cite web \|last=Degtiarenko \|first=Igor \|date=2025-01-10 \|title=Want to allow app downloads from anywhere? Here's how \|url=https://macpaw.com/how-to/allow-apps-anywhere \|url-status=live \|archive-url=https://archive.is/wip/5XYcr \|archive-date=2026-02-06 \|access-date=2026-02-06 \|website=MacPaw}}</ref><ref>{{Cite web \|date=2025-04-22 \|title=How to Allow Opening Apps from Anywhere in MacOS Sequoia, Sonoma \|url=https://osxdaily.com/2025/04/22/how-allow-open-apps-anywhere-macos-sequoia/ \|url-status=live \|archive-url=https://archive.is/pa5gU \|archive-date=2026-02-06 \|access-date=2026-02-06 \|website=OSXDaily}}</ref><!-- John in OSXDaily also provides an (unsourced) per-app override command, visible in that archive -->

	===Mandatory notarization requirement (2019)===		===Mandatory notarization requirement (2019)===
	In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>{{Cite web \|last=Stokes \|first=Phil \|date=11 Sep 2019 \|title=What is macOS Notarization? – An Easy Guide 101 \|url=https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|url-status=live \|access-date=7 May 2025 \|website=SentinelOne Blog}}</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.		In macOS Catalina (released in 2019), Apple made it mandatory for all software distributed outside the Mac App Store to be "notarized" by Apple to run without Gatekeeper warnings. This controversial move required all developers to submit their applications to Apple for review before distribution, effectively extending Apple's gatekeeping role beyond its own App Store to all Mac software.<ref>{{Cite web \|last=Stokes \|first=Phil \|date=11 Sep 2019 \|title=What is macOS Notarization? – An Easy Guide 101 \|url=https://www.sentinelone.com/blog/maco-notarization-security-hardening-or-security-theater/ \|url-status=live \|archive-url=https://archive.is/mbeuB \|archive-date=2026-02-06 \|access-date=7 May 2025 \|website=SentinelOne Blog}}</ref> The change gave Apple unprecedented control over third-party software distribution on macOS, forcing developers to comply with Apple's terms or risk their software being blocked by default.

	===Achilles vulnerability (2022)===		===Achilles vulnerability (2022)===
	In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>{{Cite web \|date=19 Dec 2022 \|title=Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability \|url=https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|url-status=live \|access-date=7 May 2025 \|website=Microsoft Security}}</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.		In December 2022, Microsoft researchers revealed a vulnerability in macOS, dubbed "Achilles" (CVE-2022-42821), that allowed attackers to bypass Gatekeeper security features. This vulnerability exposed the limitations of Apple's security model and raised questions about the effectiveness of its restrictive approach.<ref>{{Cite web \|date=19 Dec 2022 \|title=Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability \|url=https://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability/ \|url-status=live \|archive-url=https://archive.is/gUouW \|archive-date=2026-02-06 \|access-date=7 May 2025 \|website=Microsoft Security}}</ref> Despite Apple's emphasis on security as the justification for its restrictive Gatekeeper policies, the discovery highlighted that these restrictions hadn't necessarily resulted in an impenetrable system.

	===Developer signing requirement barriers (ongoing)===		===Developer signing requirement barriers (ongoing)===
	Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>{{Cite web \|last=@vish90 \|date=Jul 2019 \|title=App notarized but Gatekeeper still shows app as untrusted \|url=https://developer.apple.com/forums/thread/120016 \|url-status=live \|access-date=8 May 2025 \|website=Apple Developer Forum}}</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.		Since Gatekeeper's introduction, Apple has required developers to pay for an annual Apple Developer subscription ($99/year) to obtain a Developer ID certificate necessary for distributing software outside the App Store that doesn't trigger Gatekeeper warnings. This creates a financial barrier for independent and open-source developers who may not be able to afford or justify this recurring expense.<ref>{{Cite web \|last=@vish90 \|date=Jul 2019 \|title=App notarized but Gatekeeper still shows app as untrusted \|url=https://developer.apple.com/forums/thread/120016 \|url-status=live \|archive-url=https://archive.is/zXgiG \|archive-date=2026-02-06 \|access-date=8 May 2025 \|website=Apple Developer Forum}}</ref> The requirement effectively monetizes the right for developers to distribute software without their users experiencing security warnings.

	===Blocked legacy software (ongoing)===		===Blocked legacy software (ongoing)===
	With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>{{Cite web \|last=@paolo \|date=21 Aug 2012 \|title=Gatekeeper and the rise of the Total Apple Consumer \|url=https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|url-status=live \|access-date=8 May 2025 \|website=www.molleindustria.org}}</ref>		With each major macOS update, Apple has increased Gatekeeper restrictions, often rendering older software unusable without complex workarounds. Many users have found themselves unable to use legitimately purchased software after OS updates, as Gatekeeper blocks unsigned or un-notarized applications. This has forced users to either avoid system updates (potentially exposing themselves to security vulnerabilities) or repurchase software, effectively devaluing their previous purchases.<ref>{{Cite web \|last=@paolo \|date=21 Aug 2012 \|title=Gatekeeper and the rise of the Total Apple Consumer \|url=https://www.molleindustria.org/blog/gatekeeper-and-the-rise-of-the-total-apple-consumer/ \|url-status=live \|archive-url=https://archive.is/Kwmdf \|archive-date=2026-02-06 \|access-date=8 May 2025 \|website=www.molleindustria.org}}</ref>

	===Internet connection requirement controversy (ongoing)===		===Internet connection requirement controversy (ongoing)===