The “app is damaged” warning: the order I fix it in

macOS sometimes refuses a download with “app is damaged and can’t be opened.” On the clinic Macs I treat that as a stop sign with a checklist, not as a reason to turn security off. This note is the checklist. It is the same one I use whether the app is Disk Drill or a utility from the list.

What the message means

Most of the time the file was downloaded from the internet, and macOS set a quarantine flag on it. Gatekeeper then refuses to launch it the usual way. The message says “damaged” even when the file is intact and the only problem is that flag. Sometimes the file really is damaged, or it is not the file this site filed. Those two cases look the same in the dialog. The checks below are how I tell them apart before I change anything.

I do not read the dialog as a verdict on the developer. I read it as “this file did not come from the App Store, and macOS wants a human to notice.” On a clinic Mac, that human is me, or whoever is covering the list.

Checks I do first

1. Look at the program page on this site. Confirm the version and the size. If the file in Downloads is not the size on the page, delete it and start over from the install note. Do not drag it to Applications “just to see.”
2. Confirm you used the mirror named on that page, not a link from email or from a search ad. If you cannot say where the file came from, stop.
3. Confirm the chip. An Intel image on an Apple silicon Mac, or the other way around, can fail in ways that look like a bad download.
4. Eject any old disk image of the same app. A half-copied image from last week will happily sit next to the new one.

If those four pass and the About window is not available yet because the app will not open, the size and the source are the evidence you have. Write both on the ticket before you go further.

Opening it once from the Finder

When the size matches and the file came from the install note, I open it once from the Finder instead of from the dock:

1. In Applications, or on the mounted image, Control-click the app.
2. Choose Open.
3. Read the second dialog. If it offers Open, and I am sure of the source, I click Open. That choice is remembered for that copy of the app.

I do not use this path for a file that failed the size check. Control-click is not a way to ignore a mismatch. It is a way to acknowledge a quarantine flag on a file I already decided to trust from the page.

The quarantine flag

If Control-click still will not open a file whose size matches the page, I clear the quarantine flag on that one app, from Terminal, on the copy in Applications. I do not run it against the whole disk.

xattr -d com.apple.quarantine /Applications/Example.app

Replace the path with the app you actually installed. If xattr says the attribute is not there, do not invent a different command. Stop, and tell me the exact text. The checksum on the ticket is the next check, and that one stays off this public page on purpose.

I do not turn off Gatekeeper for the whole Mac. I do not install a “fixer” that offers to do it for me. One attribute on one app is the whole change. When the app is removed later, the attribute goes with it.

When I do not bypass it

• The download size does not match the program page.
• The file arrived as an email attachment, even if the email looked internal.
• The page for that build says the requirements are not filed yet. An empty page is not a quiet yes.
• The dialog mentions a specific problem I have not seen on this note. I want the wording before anyone clicks past it.
• You are in a hurry because the front desk is waiting. Waiting is cheaper than a Mac I then have to wipe.

None of this is a guarantee. A file can match a size and still be the wrong file. That is why the ticket gets the mirror name and why I keep checksums off the public page, where I cannot tell who is reading them.

After it opens

Open the About window and read the version out loud against the page. If it matches, eject the disk image, put the version on the ticket, and stop. If it does not match, quit, drag that copy to the trash, and tell me what the About window actually said. Do not leave both copies installed while you “figure it out tomorrow.”

Then log out of the admin account if you used one. The front desk should be on the front-desk account when you walk away. A recovery tool, or any other app from this list, does not need to stay running in order to count as installed.