What "Apple could not verify" means on a Mac
Checked October 30, 2026
The warning means macOS could not confirm the app was signed and notarized. It does not mean malware was found. First, look for an updated version from the maker or the App Store, or an alternative. Only if you are certain the app is trustworthy, go to System Settings, then Privacy & Security, and choose Open Anyway. The "damaged" and "will damage your computer" warnings are different, so do not override those.
What the warning means
macOS shows this kind of alert when it cannot verify that an app is free of malware. The app may be unsigned, or signed but not notarized. Plenty of honest apps end up here, especially free and open source ones whose makers have not paid for Apple's developer program. So does malware. The alert cannot tell you which you have. Apple warns that such software "may expose your computer and personal information to malware".
What to do, in order
- Look for a better copy. Check the maker's site and the App Store for a newer version. Apple suggests this first, and also suggests searching for an alternative app.
- Check where you got it. If it came from a download site, an ad or a link in a message, delete it and start again from the maker's real site.
- Ask the maker. Apple suggests contacting them. They may not know their app shows this warning.
- Decide. If you know the maker, and the source is right, you can override the warning for that one app.
How to use Open Anyway
- Try to open the app, then close the warning.
- Open System Settings, then Privacy & Security, and scroll down to Security.
- Find the message about the app and choose Open Anyway.
- Confirm when asked. The app is then saved as an exception.
Since macOS Sequoia, Control-clicking the app no longer gets you past this. Some Macs managed by a company do not allow it at all.
What not to do
- Do not turn Gatekeeper off for everything. Some guides suggest it, but it removes the check for every future app, just to open one.
- Do not follow a page that tells you to paste a Terminal command to "fix" this. That is how a common attack works.
Other warnings you might see
| Alert | What it means | What to do |
|---|---|---|
| App was downloaded from the internet, are you sure? | Normal first-open question for a checked app | Open it, if you meant to download it |
| Apple cannot check it for malicious software | Not notarized, or Apple could not check it | The steps above |
| Developer cannot be verified | No valid Developer ID signature | The steps above |
| Not downloaded from the App Store | Your Mac only allows store apps | Change the setting in Privacy & Security, if you choose |
| Will damage your computer, or is damaged | Known malware or a broken app | Do not override. Move it to the Trash |
If you made the app
Your users see this when a build is not notarized. Sign it with a Developer ID certificate, then notarize and staple it. MacPip asks for this on downloads. Open source apps are welcome without it, and their report says so.