# Notarization (macOS)

Canonical page: /glossary/notarization

API keys & secrets glossary, macOS Keychain & security. Notarization: Apple's Malware Check for Apps Outside the App Store

**Short answer:** Notarization is a step where a developer submits an already code-signed app to Apple for an automated scan for known malware. Apple returns a ticket that macOS checks the first time you open the app, which is why non-App-Store apps can still open smoothly instead of being blocked outright.

## Why it matters

Notarization is not a manual review of what the app does, it is an automated malware and signing check, so it confirms a baseline of safety rather than vetting an app's actual behavior or claims.

## In Claude Keychain

Claude Keychain is notarized by Apple, which is why it opens normally the first time you launch it rather than being flagged as from an unidentified developer.

## Common questions

**Is notarization the same as an App Store review?**

No, it is a lighter, automated check, distinct from the human review process the App Store uses for its listed apps.

**Why isn't Claude Keychain on the Mac App Store?**

The App Store's sandbox rules restrict the kind of system access some tools in this category need, so some developers distribute directly instead, still signed and notarized.

## Related

[Code signing](/glossary/code-signing), [App Sandbox](/glossary/app-sandbox), [Entitlements (macOS)](/glossary/entitlements)