How to check a macOS installer is genuine

Found an old “Install macOS” app on a drive or a forum? Two built-in Terminal commands show whether Apple really signed it, before you trust it with your Mac.

Every genuine macOS installer is digitally signed by Apple. If anyone modifies the installer, even by one byte, the signature breaks. That makes it easy to check an installer you didn't download yourself, such as one from an old USB drive, a colleague or a file-sharing site.

Checking an “Install macOS” app

Run this in Terminal, changing the name to match your installer:

codesign --verify --deep --strict --verbose=2 "/Applications/Install macOS Sequoia.app"

A genuine installer reports valid on disk and satisfies its Designated Requirement. Anything else, such as “a sealed resource is missing or invalid”, means the app has been changed. Delete it.

To see who signed it:

codesign -dv --verbose=4 "/Applications/Install macOS Sequoia.app" 2>&1 | grep Authority

Every Authority= line should be an Apple certificate, ending with Apple Root CA. If you see a named developer or company, someone other than Apple signed it.

Checking an InstallAssistant.pkg or .dmg package

Installer packages, such as the InstallAssistant.pkg files in the Mr. Macintosh database or the .pkg inside Apple's older disk images, can be checked with:

pkgutil --check-signature ~/Downloads/InstallAssistant.pkg

Look for Status: signed by a certificate trusted by macOS (older versions of macOS say “signed Apple Software”) and a certificate chain made up only of Apple certificates.

“Expired certificate” isn't the same as fake

Older installers can fail with “this copy of the application is damaged” even when they're genuine, because their signing certificate has since expired. The checks above still show Apple as the signer. Our guide to fixing damaged installer errors explains what to do.

The safest option: get it from Apple

Every download link on this site goes to Apple's servers or the Mac App Store, so you can skip all of this. Find your version on the home page, or check which versions your Mac supports in the Mac lookup.