Mac Security · Gatekeeper & App Safety · Lesson 2 of 5

Where Mac Apps Should Come From

The App Store, makers' own sites, and why pirated apps are risky.

The App Store and the maker's site

There are two good places to get Mac apps. The first is the Mac App Store. It is Apple's own app shop, and it is already on your Mac. Open it from the Dock or the Apple menu.

Every app in the store goes through App Review. That means people and computers at Apple look at the app before it is allowed in. They check that it does what it says and follows Apple's rules. Review is not perfect, but it stops many bad apps.

Apps in the Mac App Store must also use the App Sandbox. A sandbox is a fenced play area. The app can use its own files, but it must ask before it reaches your photos, camera, contacts or other folders. If an app misbehaves, the fence limits the damage.

The second good place is the developer's own website. A developer is the company or person who made the app. Many trusted Mac apps are only sold this way. Downloads from a maker's site are not checked by App Review. But a good maker signs and notarizes the app, so Gatekeeper can still check it.

To find the real website, be careful:

• Type the maker's name yourself, or follow a link from a source you trust.
• Skip results marked Sponsored or Ad. Fake download sites buy ads that look real.
• Look at the web address. A real one usually has the maker's name, not something like free-download-center.
• Avoid big download sites that bundle extra installers.

Here is a simple rule. Check the App Store first. If the app isn't there, go to the maker's real site. If you can't find either one, don't download it from somewhere random.

Why pirated apps are dangerous

A pirated app is a paid app that someone copied and gives away for free without permission. You may see words like cracked, free full version, keygen or patched. A crack is a change that removes the part of the app that checks if you paid.

Pirated apps are one of the most common ways malware gets onto Macs. Security researchers keep finding harmful programs hidden inside cracked copies of popular paid apps. The app may even work normally. Meanwhile something else runs quietly in the background.

That hidden part can do things like:

• Steal saved passwords, browser data and crypto wallets.
• Show ads or change your search engine.
• Use your Mac's power to make money for the criminal.
• Open a back door so a stranger can get in later.

Here is why cracked apps are so risky. Changing an app breaks the developer's signature, the tamper seal. So the copy can't pass Gatekeeper the normal way. Most crack sites then tell you to click Open Anyway, or even to type a command in Terminal. You learned earlier that pasting commands from strangers is a common scam. Following those steps turns off the very checks that would have warned you.

There are safer ways to save money:

• Look for a free trial from the real maker.
• Check for student, teacher or nonprofit discounts.
• Look for a free, well-known app that does the same job, such as ones already on your Mac.

A free copy of an expensive app is almost never really free. The price is often your data.