Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Apple's macOS Catalina is first to require app notarization by default

Last updated

Apps that have not passed through Apple's software security process will be prevented from running on macOS Catalina by an updated version of Gatekeeper.

Developers intending to support the forthcoming macOS Catalina must submit their apps to Apple's notarizing security process or they will not run.

The new measure is an extension to the existing Gatekeeper process which optionally allowed developers to submit their apps. Apple says the requirement is designed to ensure downloaded software is from the source users believe it is.

"Mac apps, installer packages, and kernel extensions that are signed with Developer ID must also be notarized by Apple in order to run on macOS Catalina," said the company in a new developer page. "This will help give users more confidence that the software they download and run, no matter where they get it from, is not malware by showing a more streamlined Gatekeeper interface."

The process involves a registered developer sending Apple their software, which is automatically scanned to look for malicious code and other potential security issues. It's intended for developers who distribute their apps outside of the Mac App Store. Apps within the store already go through similar security procedures.

The Notarized Apps feature was first announced as an option at 2018's WWDC, but Apple has been working to make it mandatory.

The new macOS Catalina was announced at the 2019 WWDC and beta versions of the software have already been made available to developers.



35 Comments

pigybank 178 comments · 17 Years

I hope there’s a way to manually override it.  I don’t want Apple deciding what I can or cannot run on my Mac. 

netrox 1507 comments · 12 Years

Hopefully there's a way for us power users to override it as we can with current one.

dantheman827 118 comments · 9 Years

eightzero said:
Court filings in 3...2...1...

Apple doesn't force you to run MacOS on their hardware, nor do they prevent you from running alternatives.

They also don't force you to run only the newest version of macOS either

Plus, the whole notarization process is more like a cloud-based antivirus than App Store approval

https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution

yuck9 111 comments · 13 Years

Beginning in macOS 10.14.5, all new or updated kernel extensions and all software from developers new to distributing with Developer ID must be notarized in order to run. Beginning in macOS 10.15, notarization is required by default for all software.