How to Allow Apps From Outside the App Store in macOS Security Settings

The App Store is convenient, but a lot of the best Mac software is not in it. Creative tools, developer utilities, printer software, older programs, and many work apps are downloaded straight from the maker’s website. By default, macOS limits where apps can come from, so knowing how to allow apps from outside the App Store is an essential skill for any Mac owner.

The good news is that you do not need to weaken your Mac’s security to install outside software. Modern macOS gives you a setting for App Store and identified developers, plus a per-app approval for exceptions. This guide explains each option, shows you how to change the setting step by step, and explains how to stay safe while using software from the wider web.

Quick Answer

To allow apps from outside the App Store, open System Settings, go to Privacy and Security, scroll to the Security section, and choose App Store and identified developers under Allow applications from. Apps from identified developers will then open normally. For an app that is still blocked, click Open Anyway in the same settings screen to approve that single app without changing your overall security level.

Understanding the macOS App Source Settings

macOS uses a security feature called Gatekeeper to control which apps can run. In current versions of macOS, the settings offer two main choices for where applications may come from.

• App Store: Only apps downloaded from the App Store can open. This is the strictest option and rarely practical, because even well-known developers distribute some apps only from their own websites.
• App Store and identified developers: Apps from the App Store and from developers registered with Apple can open. This is the default on new Macs and the best balance for most people.

Older versions of macOS showed a third choice, Anywhere, which allowed every app regardless of source. Apple removed that option from the visible settings years ago because it exposed users to too much risk. If a guide tells you to select Anywhere from settings, it is out of date. You do not need it: between the identified developers setting and the per-app Open Anyway approval, you can run any legitimate app safely.

What Is an Identified Developer?

An identified developer is a developer who has registered with Apple and received a unique Developer ID. They sign their apps with a digital certificate, which lets macOS confirm who created the app and check that the app has not been tampered with since it was signed. Many identified developer apps are also notarised, meaning Apple has scanned them for known malware. When an app is signed and notarised, it opens with no warnings at all, even when downloaded from the web.

How to Change the Setting Step by Step

The setting lives in System Settings on macOS Ventura and later. Follow these steps:

1. Click the Apple menu in the top left corner of the screen.
2. Choose System Settings.
3. Select Privacy and Security in the sidebar.
4. Scroll down to the Security section.
5. Find Allow applications from and select App Store and identified developers.
6. If macOS asks, confirm the change with your password or Touch ID.

On older macOS versions, such as Monterey and earlier, the same option lives in System Preferences under Security and Privacy, on the General tab. Click the padlock at the bottom of that window, enter your admin password, and then choose App Store and identified developers. Apple explains these options in its official support documentation on controlling which apps from the internet are allowed on your Mac.

How to Approve a Single App With Open Anyway

Even with the identified developers setting selected, an unsigned or unnotarised app will be blocked the first time you open it. That is expected behaviour, not a fault. You approve that one app like this:

1. Double-click the app and wait for the warning that it cannot be opened or the developer cannot be verified.
2. Dismiss the warning.
3. Open System Settings and go to Privacy and Security.
4. Scroll to the Security section, where a message names the blocked app.
5. Click Open Anyway.
6. Click Open in the confirmation dialog and authenticate if asked.

The app now runs, and macOS remembers the exception for that app only. Every other unsigned app will still be checked. This per-app approach is the safest way to use the occasional tool that is not signed, and it is also the fix described in our guide to the unidentified developer warning and how to open a blocked app safely, if you meet that message first.

Installing an App From a Developer’s Website

Most outside apps arrive as a disk image, a package installer, or a zip file. The typical process looks like this:

1. Download the app only from the developer’s official website. Check the address carefully before downloading.
2. Open the downloaded file from your Downloads folder.
3. If it is a disk image, drag the app icon onto the Applications folder shortcut shown in the window.
4. If it is a package ending in .pkg, double-click it and follow the installer steps, reading each screen before clicking Continue.
5. Eject the disk image and move the downloaded file to the Trash once the app is safely in Applications.
6. Open the app from Applications. If Gatekeeper blocks it, use Open Anyway or the right-click method.

Keeping apps in the Applications folder matters. An app left inside a disk image or sitting in Downloads may trigger fresh warnings every launch, and updates often fail from those locations.

Staying Safe When Installing Outside Apps

Allowing outside apps is normal and safe when you follow a few habits. Download only from official developer websites, never from pop-up adverts or file-sharing pages. Be suspicious of any site that bundles a well-known app with an installer for extra offers. Keep macOS itself updated, because Gatekeeper’s malware definitions improve with system updates. Check reviews and the developer’s support presence before installing anything obscure. Finally, remove apps you no longer use, because every installed app is one more thing to keep updated and trustworthy.

Extra Caution With Admin Passwords

Some installers ask for your Mac admin password. Legitimate system tools, drivers, and software that installs components for all users may need it. A simple game or note-taking app usually does not. If an installer asks for your password and you cannot see a clear reason, cancel the installation and research the app before trying again.

Common Mistakes to Avoid

• Searching settings for an Anywhere option: It no longer exists in the interface. Chasing it wastes time and leads many people to risky Terminal commands they do not need.
• Disabling Gatekeeper completely: Terminal commands that turn off all app checks exist, but they remove protection for every future download, not just today’s app. The per-app approval achieves the same goal safely.
• Downloading from unofficial mirror sites: A familiar app name on an unfamiliar site is a classic malware delivery trick. Always start from the developer’s own domain.
• Leaving apps in Downloads: Install apps into Applications. It prevents repeated warnings, broken updates, and confusion about which copy is approved.
• Ignoring the setting after a one-off install: Keep the identified developers option selected permanently. There is no benefit to switching back and forth, and the stricter App Store-only option will block legitimate updates.
• Approving apps you did not mean to download: If a blocked app’s name is unfamiliar, it may have arrived bundled with something else. Delete it rather than approving it.

What Changed in Recent macOS Versions

Apple tightens this process a little with each major release. On macOS Sequoia, for example, the right-click trick was adjusted so that System Settings approval became the emphasised route for some blocked apps, pushing users toward the Open Anyway button. The principle stays the same across versions: identified developers run freely, unknown apps need your explicit approval once, and nothing runs silently without either a signature or your say-so. If a step looks slightly different on your Mac, look for the same wording — Privacy and Security, Allow applications from, and Open Anyway — and you will find your way.

Conclusion

Allowing apps from outside the App Store is a normal part of using a Mac, and macOS is designed to make it safe. Set Allow applications from to App Store and identified developers, install apps into the Applications folder from official websites only, and use Open Anyway for the rare unsigned app you genuinely trust. You never need to disable Gatekeeper or hunt for a hidden Anywhere option. With those habits, you get the full range of Mac software without giving up the protection that keeps your Mac secure.

Frequently Asked Questions

Is it safe to allow apps from identified developers?

Yes. Identified developers are registered with Apple and sign their apps, and most such apps are also notarised after a malware scan. This setting is the default on new Macs and is the recommended balance of freedom and safety for most users.

Why is there no Anywhere option in my settings?

Apple removed the Anywhere option from the visible settings in macOS Sierra and later because it allowed every app, including harmful ones, to run without checks. You can still run any legitimate app by approving it individually with Open Anyway.

Do I need to change the setting for every app?

No. The App Store and identified developers setting is changed once and applies to all apps. Only unsigned or unnotarised apps need a one-time Open Anyway approval each, after which they open normally.

What does notarised mean?

Notarisation means the developer sent the app to Apple for an automated security scan before release, and Apple found no known malware or signing problems. A notarised app shows no warning on first launch, even when downloaded from the web.

Can I go back to App Store only later?

Yes. Return to Privacy and Security settings and select App Store under Allow applications from. Apps you already installed from elsewhere will be blocked from opening until you change the setting again or approve them individually.