Enable or Disable Gatekeeper with spctl --master

Temporarily turn app assessment off to install unsigned software, then turn it back on.

macOSGatekeeperspctlsecurityHigh risk

Run sudo spctl --master-disable to allow all apps, install what you need, then immediately run sudo spctl --master-enable.

01Command

Command

$ sudo spctl --master-disable   # re-enable with: sudo spctl --master-enable

02What it does

Gatekeeper is macOS's check that apps come from identified developers; --master-disable switches the policy to 'Anywhere' so unsigned apps launch, and --master-enable restores the default protection. On recent macOS the option only appears in System Settings while disabled. Prefer the narrower alternative — right-click the blocked app and choose Open — which exempts a single app instead of the whole system.

03Risk

RiskHigh risk

RequirementsAdministrator password for sudo.

!Warning: This disables a core security layer for every app, not just the one you want — re-enable it immediately and never install software you don't trust. Malware routinely relies on users leaving Gatekeeper off.

04Undo

Undo

$ sudo spctl --master-enable

05Sources

Safely open apps on your Mac
Apple · vendor-doc · 2026-09-17
Evidence: Apple's guidance on opening apps Gatekeeper blocks and the risks of bypassing assessment.
spctl - security assessment policy tool
SS64 · technical · 2026-09-17
Evidence: Documents spctl --master-disable/--master-enable for turning Gatekeeper assessment off and on.

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Verify an App's Code Signature with codesign

macOSGatekeepersignaturecodesign

Check whether an application bundle was signed properly and hasn't been modified since.

Low risk ✓ 2026-09-17

Remove the Quarantine Attribute with xattr

macOSquarantineGatekeeperxattr

List and clear extended attributes — the quarantine flag, Finder tags, and download provenance — on any file.

Medium risk ✓ 2026-09-17

Create an Encrypted Disk Image with hdiutil

macOShdiutilsecuritydisk-image

Build an AES-256 encrypted .dmg vault from the Terminal — no Disk Utility clicking required.

Low risk ✓ 2026-09-17