Disable Gatekeeper

Overview

About this script

This script improves your privacy on macOS.

These changes use Mac system commands to update your settings.

• https://web.archive.org/web/20240523173608/https://www.manpagez.com/man/8/spctl/
• https://web.archive.org/web/20240810103202/https://krypted.com/mac-security/manage-gatekeeper-from-the-command-line-in-mountain-lion/
• https://community.jamf.com/t5/jamf-pro/users-can-t-change-password-greyed-out/m-p/54228

This script uses Bash (Shell script) scripting language.

Not Advised

This script should only be used by advanced users. This script is not recommended for daily use as it breaks important functionality. Do not run it without having backups and system snapshots.

Implementation Details

• Language: bash

• Required Privileges: Administrative (sudo) access

• Compatibility: macOS only

• Reversibility: Can be undone using provided revert script

Explore Categories

Disable Gatekeeper (enforces code-signing)

This action belongs to Disable Gatekeeper (enforces code-signing) category. This category configures macOS using 2 scripts. The category includes 2 subscripts. Read more on category page ▶

Privacy over security

This action belongs to Privacy over security category. This category configures macOS using 14 scripts. These scripts are organized in 5 categories. The category includes 1 subscripts and 3 subcategories that include more scripts and categories. Read more on category page ▶

Apply now

Choose one of three ways to apply:

1. Automatically via privacy.sexy: The easiest and safest option.
2. Manually by downloading: Requires downloading a file.
3. Manually by copying: Advanced flexibility.

Alternative 1. Apply with Privacy.sexy

privacy.sexy is free and open-source application that lets securely apply this action easily.

Open privacy.sexy

You can fully restore this action (revert back to the original behavior) using the application.

privacy.sexy instructions

1. Open or download the desktop application
2. Search for the script name: Disable Gatekeeper.
3. Check the script by clicking on the checkbox.
4. Click on Run button at the bottom of the page.

Alternative 2. Download

Irreversible Changes

This script is irreversible, meaning there is no straightforward method to restore changes once applied. Exercise caution before running, restoring it may not be possible.

1. Download the script file by clicking on the button below:

   Download script

2. Run the script file by clicking on it.

Download revert script

This file restores your system to its original state, before this script is applied.

Download restore script

Alternative 3. Copy

This is for advanced users. Consider automatically applying or downloading the script for simpler way.

1. Open Terminal app

2. Copy the following code:

Code to apply changes

os_major_ver=$(sw_vers -productVersion | awk -F "." '{print $1}')
os_minor_ver=$(sw_vers -productVersion | awk -F "." '{print $2}')
if [[ $os_major_ver -le 10 \
        || ( $os_major_ver -eq 10 && $os_minor_ver -lt 7 ) \
    ]]; then
    echo "No action needed, Gatekeeper is not available this OS version"
else
    gatekeeper_status="$(spctl --status | awk '/assessments/ {print $2}')"
    if [ $gatekeeper_status = "disabled" ]; then
        echo "No action needed, Gatekeeper is already disabled"
    elif [ $gatekeeper_status = "enabled" ]; then
        sudo spctl --master-disable
        sudo defaults write '/var/db/SystemPolicy-prefs' 'enabled' -string 'no'
        echo "Disabled Gatekeeper"
    else
        >&2 echo "Unknown gatekeeper status: $gatekeeper_status"
    fi
fi

3. Paste the code into terminal.
4. Press Enter to apply the code.

Some scripts requires restarting your computer to take affect.

Copy restore code

Copy and run the following code to restore changes:

Revert code

os_major_ver=$(sw_vers -productVersion | awk -F "." '{print $1}')
os_minor_ver=$(sw_vers -productVersion | awk -F "." '{print $2}')
if [[ $os_major_ver -le 10 \
        || ( $os_major_ver -eq 10 && $os_minor_ver -lt 7 ) \
    ]]; then
    >&2 echo "Gatekeeper is not available in this OS version"
else
    gatekeeper_status="$(spctl --status | awk '/assessments/ {print $2}')"
    if [ $gatekeeper_status = "disabled" ]; then
        sudo spctl --master-enable
        sudo defaults write '/var/db/SystemPolicy-prefs' 'enabled' -string 'yes'
        echo "Enabled Gatekeeper"
    elif [ $gatekeeper_status = "enabled" ]; then
        echo "No action needed, Gatekeeper is already enabled"
    else
        >&2 echo "Unknown Gatekeeper status: $gatekeeper_status"
    fi
fi

Support

This website relies on your support.

Support now

Your donation helps keep the project alive and improves its content ❤️.

Share this page:

EmailLinkedInXRedditFacebookPinterestWhatsAppTelegramWeiboVK