Check Whether Gatekeeper Is Enabled

Use spctl --status to see if macOS's download-app verification (Gatekeeper) is turned on.

macOSGatekeeperspctlsecurityMedium risk

Run `spctl --status` — 'assessments enabled' means Gatekeeper is on; 'disabled' means downloaded apps run without verification.

01Command

Command

$ spctl --status

02What it does

Gatekeeper is why macOS shows 'cannot be opened because it is from an unidentified developer' for some downloads; this command reports the system-wide switch behind that behavior. A 'disabled' result usually means someone ran `spctl --global-disable` to bypass warnings — fine deliberately, risky otherwise, since every downloaded app then runs unchecked. Re-enable with `sudo spctl --global-enable`.

03Risk

RiskMedium risk

04Undo

Undo

$ sudo spctl --global-enable

05Sources

spctl — GateKeeper assessment management tool (macOS man page)
SS64 · technical · 2026-09-17
Evidence: Documents `spctl --status` which reports the system-wide Gatekeeper assessment state (enabled or disabled).
Protecting users from malware on Mac
Apple Support · vendor-doc · 2026-09-17
Evidence: Explains Gatekeeper's role in verifying that downloaded apps come from identified developers before they are allowed to run.

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Verify an App's Code Signature with codesign

macOSGatekeepersignaturecodesign

Check whether an application bundle was signed properly and hasn't been modified since.

Low risk ✓ 2026-09-17

Remove the Quarantine Attribute with xattr

macOSquarantineGatekeeperxattr

List and clear extended attributes — the quarantine flag, Finder tags, and download provenance — on any file.

Medium risk ✓ 2026-09-17

Create an Encrypted Disk Image with hdiutil

macOShdiutilsecuritydisk-image

Build an AES-256 encrypted .dmg vault from the Terminal — no Disk Utility clicking required.

Low risk ✓ 2026-09-17