Sharing and signing
Why apps built in the desktop app open without a warning, and what happens when you share them.
Short version: an app built in the desktop app opens on your Mac with no warning. If you send it to someone, they see a warning once.
How the desktop app builds your app
- The cloud writes the code.
- Your Mac compiles it. This uses Xcode on your Mac.
- Your Mac signs it. This is called ad-hoc signing.
- You press Open app. It opens.
Nothing is installed. Nothing leaves your Mac after step 1.
What is ad-hoc signing?
A signature is a seal on the app. It shows the app was not changed.
An ad-hoc signature is a seal you make yourself. It needs no Apple account. It is free.
The desktop app does it for you with one built-in macOS tool, codesign. You do not run anything.
Why there is no warning on your Mac
macOS marks files that come from the internet. The mark is called quarantine. When you open a marked app, macOS checks it and may warn you.
The desktop app makes your app on your Mac. It does not download it. So it has no quarantine mark. macOS opens it.
When you will see the warning
- You download the app with a browser.
- You get the app by email or chat.
- Someone else opens a ZIP or DMG you sent them.
Then macOS says it cannot check the app. This is normal. Our apps are not notarized.
How to open it anyway
- Double-click the app. Click Done.
- Open System Settings, then Privacy & Security.
- Scroll down. Click Open Anyway.
You do this once per app.
ZIP and DMG buttons
After a build, the desktop app shows Open app, Show in Finder, Save as .zip and Save as .dmg.
- ZIP is one small file. Good for chat and email.
- DMG is a disk image. People drag the app to Applications.
Both files are saved next to the app. Finder opens to show you.
Send a ZIP or DMG to a friend and they see the warning above. Tell them the three steps.
Remove the warning for everyone
You need two things:
- A paid Apple Developer account.
- Notarization. Apple checks your app and approves it.
Then the app opens for everyone with no warning. See Signing and first launch and Notarize your app.
Why we do not do this for you
A signature says who made the app. It uses your private keys. Those stay on your Mac.