Remove the Quarantine Attribute with xattr

List and clear extended attributes — the quarantine flag, Finder tags, and download provenance — on any file.

macOSquarantineGatekeeperxattrattributesMedium risk

Run `xattr -l <file>` to see attributes, then `xattr -r -d com.apple.quarantine <app>` to clear the Gatekeeper flag recursively.

01Command

Command

$ xattr -r -d com.apple.quarantine /Applications/SomeApp.app

02What it does

Every file downloaded by a browser or AirDrop carries com.apple.quarantine, the hidden attribute that triggers 'cannot be opened because Apple cannot check it'. xattr is the built-in way to inspect all extended attributes, including Finder color tags which are themselves attributes. The -r flag is essential for app bundles because attributes sit on every file inside; deleting a single file's flag won't fix the whole bundle.

03Risk

RiskMedium risk

!Warning: Only clear quarantine on software from a source you trust — this bypasses the Gatekeeper prompt.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

macOS xattr — display and manipulate extended attributes
SS64 · technical · 2026-09-17
Evidence: Documents xattr -l, -d and -r for extended attribute inspection and removal.

Last verified: 2026-09-17 · Category: Files & Folders

06Related solutions

Verify an App's Code Signature with codesign

macOSGatekeepersignaturecodesign

Check whether an application bundle was signed properly and hasn't been modified since.

Low risk ✓ 2026-09-17