[{"data":1,"prerenderedAt":220},["ShallowReactive",2],{"blog:vpn-app-wont-install":3},{"zh-CN":4,"en":121},{"blocks":5,"faq":102},[6,9,11,13,17,19,24,26,29,31,33,36,38,40,43,45,70,72,74,77,79,81,84,86,88,91,93,95,98,100],{"type":7,"html":8},"p","苹果手机说「未受信任的企业级开发者」，安卓提示「来源不明」，Windows 弹出 SmartScreen 拦截，macOS 拦一下 Gatekeeper——四个提示措辞不同，说的是同一件事：这个安装包没有经过这个平台自己的官方分发渠道，系统没法替你确认它到底是谁做的。这是正常的安全提醒，不是应用坏了，也不代表手机或电脑出了问题，四个系统的用户都会遇到，不是某一个平台特有的毛病。",{"type":7,"html":10},"真正该关心的不是「怎么让这条提示消失」，而是「这个安装包到底是从哪儿来的」。来源对，提示的意义只是走了一条系统不熟悉的路；来源不对，提示恰恰是在提醒你停下来，这时候的正确反应是重新确认来源，不是继续往下装。",{"type":7,"html":12},"排查原则不变：\u003Cstrong>先确认来源，再决定下一步\u003C\u002Fstrong>，不要看到提示第一反应就是想办法绕过去。这几个提示存在的意义，本来就是为了在正式安装之前，给你一个停下来看一眼来源的机会。",{"type":14,"id":15,"html":16},"h2","bp-triage","先确认一件事：安装包是从哪儿来的",{"type":7,"html":18},"回想一下这个安装包是怎么到手的——是从官方页面直接下载的，还是别人转发的链接、论坛帖子里的第三方镜像、或者搜索出来的不太熟悉的网站。这一点很容易在下载之后就忘记，尤其是隔了几天才打开安装的情况，值得先花十几秒钟倒回去确认一下。",{"type":20,"items":21},"list",[22,23],"确认是从官方页面下载的：往下看对应系统那一节，提示大概率只是正常流程，不用紧张。","说不清楚具体从哪来的，或者是别人转发的：先别急着装，参考\u003Ca href=\"\u002Fblog\u002Fhow-to-spot-a-fake-vpn-app\u002F\">怎么认出假冒 VPN 应用与山寨官网\u003C\u002Fa>核对一遍来源，这一步比研究怎么绕过提示更重要，也更能保护自己的设备和账号。",{"type":7,"html":25},"这一步决定了后面该怎么看待这条提示——同样一句「未受信任」，在确认来源之后和之前，处理方式完全不一样，跳过这一步直接去研究怎么装上，反而是最容易出问题的顺序。",{"type":14,"id":27,"html":28},"bp-ios","苹果手机：提示来自未受信任的企业级开发者",{"type":7,"html":30},"这句提示出现在安装包不是通过 App Store 分发的时候。苹果对通过自己商店分发的应用会做一轮审核和签名核实，对商店之外的安装方式，系统没有这道核实，只能提醒你这一点，交给你自己判断。这种分发方式常见于企业内部自用的工具，被公开分享出来给普通用户安装，就不是它原本设计给的场景。",{"type":7,"html":32},"正常、受支持的安装方式是通过 App Store 获取应用。看到这条提示，说明手上这个安装包走的不是这条路——比较妥当的做法不是想办法让系统认可这个安装包，而是回到官网找到对应的 App Store 入口重新获取，从源头上避开这条提示，而不是跟提示本身较劲。",{"type":14,"id":34,"html":35},"bp-android","安卓手机：提示来源不明或者存在风险",{"type":7,"html":37},"安卓系统会核实一个安装包是不是通过系统认可的渠道分发的，不认识的来源就会弹这类提醒。国内环境下不少应用确实需要从官网直接下载安装包，这本身是常见的分发方式，不代表这个安装包一定有问题，但也不代表可以跳过核实这一步——两件事分开判断，才不会一刀切地把所有直接下载都当成危险，也不会因为大部分时候没事就彻底不设防。",{"type":7,"html":39},"看到提示时，先回到官方页面核对一下域名和链接是否一致，确认这个安装包确实来自官方渠道，而不是某个看起来很像但域名不太一样的页面。域名核对不上，就属于前面提到的假冒来源，不是这一节要讲的正常提示。文件大小和官网标注的差太多，也是一个值得留意的信号，被篡改过的安装包体积往往跟原版有明显差异。",{"type":14,"id":41,"html":42},"bp-compare","四个系统，拦截的说法不一样",{"type":7,"html":44},"同样的意思，四个系统给出的提示文字和触发条件不完全一样：",{"type":46,"align":47,"head":49,"rows":53},"table",[48,48,48],null,[50,51,52],"系统","常见提示","这说明什么",[54,58,62,66],[55,56,57],"iOS","未受信任的企业级开发者","安装包不是通过 App Store 分发的，系统没有走它自己的审核流程",[59,60,61],"Android","来源不明 \u002F 此类应用可能有风险","安装包不是通过系统认可的商店渠道分发的",[63,64,65],"Windows","SmartScreen 拦截","这个安装包的来源或者信誉记录还没有被系统积累到足够多的数据",[67,68,69],"macOS","Gatekeeper 拦截","应用没有经过苹果的公证流程，或者是从网络下载后带着来源标记",{"type":7,"html":71},"四条提示背后的逻辑是同一句话：系统认不出这条分发渠道，转达给你自己判断，不代表这个安装包一定有问题，也不代表一定没问题——真正能给出答案的，始终是安装包的来源，不是提示本身。",{"type":73},"downloads",{"type":14,"id":75,"html":76},"bp-windows","Windows 电脑：被 SmartScreen 拦下",{"type":7,"html":78},"SmartScreen 核实的是安装包的来源和这份文件本身积累下来的信誉记录。刚发布不久的新版本，即使签名和来源完全没问题，也可能因为还没被足够多人运行过而触发提示，这是时间和数据积累的问题，跟安装包本身有没有问题是两件事。运行的人越多，这份记录积累得越快，提示出现的概率也会跟着降下来，这个过程不受单个用户的操作影响。",{"type":7,"html":80},"遇到这条提示，先确认下载链接是不是来自官方页面。确认无误的话，这条提示更多是提醒你留意来源，而不是在判断这个文件真的有危险；确认不了来源，就参考前面提到的核对方法重新走一遍。",{"type":14,"id":82,"html":83},"bp-macos","macOS：被 Gatekeeper 拦下",{"type":7,"html":85},"Gatekeeper 核实的是应用有没有经过苹果的公证流程，以及这个文件是不是从网络下载、带着来源标记。原理和前面几个系统类似，都是在确认「这东西是从哪来的」，只是苹果在这一层做得更严格一些——即便是正常签名的应用，只要走的是网页下载而不是 App Store，也会带上这个来源标记，被系统多问一句。",{"type":7,"html":87},"同样的处理思路：先回到官方页面确认下载链接，官网的功能介绍和下载入口都能找到对应版本。来源确认没问题，这条提示只是系统在履行它自己的核实流程。",{"type":14,"id":89,"html":90},"bp-honest","如果连官方渠道下载的也一直弹提示",{"type":7,"html":92},"绝大多数情况下，确认来源之后问题就清楚了。但如果反复确认过是官方渠道，提示还是每次都出现，也不用勉强自己继续摸索——这种情况直接联系客服说明具体的系统版本和提示内容，比自己反复尝试更有效率，客服能判断是不是这一批分发确实需要更新签名或者公证信息，这类问题从用户这一端通常是解决不了的，等更新比硬试更划算。",{"type":7,"html":94},"反过来，如果提示是从一个说不清楚来源的地方装出来的，最应该做的不是让它安装成功，而是先怀疑这个来源本身——前面提到的辨认方法就是为这种情况准备的。",{"type":14,"id":96,"html":97},"bp-final","总结",{"type":7,"html":99},"四个系统的提示说法不一样，说的都是同一件事：这个安装包没有经过官方分发渠道的核实。先确认来源，官方渠道来的，提示大概率只是正常流程；来源说不清楚，先核对清楚域名和链接再决定要不要继续，别急着想办法让提示消失。这个顺序比记住每个系统具体叫什么提示更重要，四个系统换个说法，判断方式是一样的。",{"type":7,"html":101},"装好之后顺利登录才是下一步，\u003Ca href=\"\u002Fblog\u002Fvpn-login-problems\u002F\">VPN 登录失败、验证码收不到怎么办\u003C\u002Fa>接着讲了那部分常见的卡点。各平台对应的正规入口，都能从官网的\u003Ca href=\"\u002Ffeatures\u002F\">功能介绍\u003C\u002Fa>或者\u003Ca href=\"\u002Fsignup\u002F\">下载页\u003C\u002Fa>找到，从源头上避开这类提示。",[103,106,109,112,115,118],{"q":104,"a":105},"提示未受信任，是不是说明这个应用有病毒？","不一定。这类提示本身只说明安装包没有经过对应平台的官方分发渠道核实，跟有没有恶意代码是两件事。判断安不安全，看下载来源是不是官方，比这条提示本身更重要。",{"q":107,"a":108},"官网下载的安装包，为什么还是会弹这类提示？","新发布的版本需要一点时间才能在各平台上积累到足够的信任度，即使签名和来源都没问题，头几天也可能遇到提示。这和安装包本身有没有问题不是一回事。",{"q":110,"a":111},"苹果手机上要怎么正常安装？","通过 App Store 安装是苹果官方认可的分发方式，走这条路不会遇到这类提示，官网的下载入口会引导到正确的 App Store 页面。",{"q":113,"a":114},"安卓手机在哪里下载才安全？","认准官方页面给出的链接和域名。看到提示的时候，先确认这个安装包确实来自那个页面，而不是别处转发或者分享的链接。",{"q":116,"a":117},"Windows 或 macOS 上一直弹提示，是电脑本身有问题吗？","不是。这是系统自带的安全机制在核实安装包的来源和签名，跟电脑好不好没有关系，换一台电脑装同一个来源不明的安装包，同样会弹。",{"q":119,"a":120},"已经装上了，还需要注意什么吗？","装上之后正常登录使用就好。如果同一个来源反复触发提示，或者页面看起来眼生，先按\u003Ca href=\"\u002Fblog\u002Fhow-to-spot-a-fake-vpn-app\u002F\">怎么认出假冒 VPN 应用\u003C\u002Fa>核对一遍，再决定要不要继续用。",{"blocks":122,"faq":201},[123,125,127,129,131,133,137,139,141,143,145,147,149,151,153,155,174,176,177,179,181,183,185,187,189,191,193,195,197,199],{"type":7,"html":124},"An iPhone says "untrusted enterprise developer," Android says "unknown source," Windows raises a SmartScreen block, and macOS stops it with Gatekeeper — four different phrasings for the same underlying message: this installer didn't go through that platform's own official distribution channel, so the system has no way to confirm on your behalf who actually made it. This is a normal security notice, not a broken app, and it doesn't mean anything is wrong with the phone or computer — every user on all four platforms runs into it, not just one platform behaving badly.",{"type":7,"html":126},"What's worth caring about isn't "how do I make this warning go away," it's "where did this installer actually come from." If the source is right, the warning just means it took a path the system doesn't recognise; if the source is wrong, the warning is exactly the moment to stop — the right response is double-checking the source again, not pushing the install further.",{"type":7,"html":128},"The same rule as always: \u003Cstrong>confirm the source first, then decide what's next\u003C\u002Fstrong>. Don't let the first instinct on seeing the warning be finding a way around it — the entire point of these warnings is to give you a moment to look at the source before the install goes through.",{"type":14,"id":15,"html":130},"First, check one thing: where did this installer come from?",{"type":7,"html":132},"Think back to how this installer actually got onto the device — a direct download from the official page, a link someone forwarded, a third-party mirror from a forum post, or an unfamiliar site that turned up in a search. This detail is easy to forget once a few days pass between downloading and actually opening the installer, so it's worth spending ten seconds tracing it back.",{"type":20,"items":134},[135,136],"Confirmed it came from the official page: keep reading the section for the relevant system — the warning is very likely just normal process, nothing to worry about.","Not sure where it came from, or it was forwarded by someone else: don't rush to install it. Check the source against \u003Ca href=\"\u002Fen\u002Fblog\u002Fhow-to-spot-a-fake-vpn-app\u002F\">how to spot a fake VPN app and knockoff sites\u003C\u002Fa> first — that step matters more than figuring out how to get past the warning, and it protects the device and the account far better.",{"type":7,"html":138},"This one step decides how the rest of the warning should be read — the exact same word "untrusted" means something different depending on whether the source has already been confirmed. Skipping this and going straight to figuring out how to force the install through is the order most likely to cause a real problem.",{"type":14,"id":27,"html":140},"On an iPhone: "untrusted enterprise developer"",{"type":7,"html":142},"This message appears when an installer wasn't distributed through the App Store. Apple runs a round of review and signature verification on anything distributed through its own store; outside that store, the system has no such check to rely on, so all it can do is flag this fact and leave the judgment to you. This kind of distribution is common for tools meant for internal use inside a company — sharing one publicly for ordinary users to install is simply not the scenario it was built for.",{"type":7,"html":144},"The normal, supported way to install is through the App Store. Seeing this warning means the installer in hand didn't take that route — the sound move isn't finding a way to make the system accept this particular installer, it's going back to the official site and finding the App Store listing to get it properly, which avoids the warning at the source instead of fighting the warning itself.",{"type":14,"id":34,"html":146},"On Android: "unknown source" or "may be harmful"",{"type":7,"html":148},"Android checks whether an installer was distributed through a channel the system recognises, and flags anything unfamiliar. Plenty of legitimate apps genuinely need to be downloaded as an installer straight from an official site in some markets — that's a common, ordinary distribution method on its own, and it doesn't automatically mean this particular installer has a problem, but it also doesn't mean the verification step can be skipped. Keeping those two judgments separate matters: it stops you from treating every direct download as dangerous, and it stops you from dropping your guard entirely just because most of the time nothing goes wrong.",{"type":7,"html":150},"When the warning shows up, go back to the official page and check that the domain and link match exactly, confirming the installer really did come from the official channel rather than a page that looks similar but sits on a slightly different domain. A domain that doesn't match falls into the fake-source case mentioned above — it isn't the normal warning this section is about. A file size that's noticeably different from what the official site states is also worth noticing; a tampered installer's size often differs visibly from the original.",{"type":14,"id":41,"html":152},"Four systems, four different ways of saying it",{"type":7,"html":154},"Same underlying idea, but the wording and triggers differ across the four systems:",{"type":46,"align":156,"head":157,"rows":161},[48,48,48],[158,159,160],"System","Common warning","What it means",[162,165,168,171],[55,163,164],"Untrusted enterprise developer","The installer wasn't distributed through the App Store, so it skipped Apple's own review process",[59,166,167],"Unknown source \u002F may be harmful","The installer wasn't distributed through a store channel the system recognises",[63,169,170],"Blocked by SmartScreen","This installer's source or reputation record hasn't built up enough data with the system yet",[67,172,173],"Blocked by Gatekeeper","The app wasn't notarized by Apple, or it carries a download-origin flag from the web",{"type":7,"html":175},"All four warnings run on the same underlying logic: the system doesn't recognise this distribution channel and is handing the judgment to you — it doesn't mean the installer definitely has a problem, and it doesn't mean it definitely doesn't. The only thing that actually answers that question is the installer's source, never the warning itself.",{"type":73},{"type":14,"id":75,"html":178},"On Windows: blocked by SmartScreen",{"type":7,"html":180},"SmartScreen checks an installer's source and the reputation record that specific file has built up over time. A version released only recently can trigger this warning even when the signature and source are both completely fine, simply because not enough people have run it yet — that's a matter of time and accumulated data, a separate question from whether the installer itself has an issue. The more people run it, the faster that record builds, and the odds of seeing the warning drop accordingly — a process no single user's actions can speed up on their own.",{"type":7,"html":182},"Hitting this warning, first confirm the download link actually came from the official page. If it checks out, the warning is mainly a nudge to pay attention to the source rather than a verdict that the file is genuinely dangerous; if the source can't be confirmed, go back through the same check described above.",{"type":14,"id":82,"html":184},"On macOS: blocked by Gatekeeper",{"type":7,"html":186},"Gatekeeper checks whether an app was notarized by Apple, and whether the file carries a download-origin flag from being pulled off the web. The logic is the same as the other systems — confirming "where did this actually come from" — Apple just applies it a bit more strictly: even a properly signed app gets that origin flag and an extra question from the system the moment it's downloaded from a web page instead of the App Store.",{"type":7,"html":188},"Same approach here: go back to the official page to confirm the download link — the official site's features page and download entry both lead to the right version. Once the source checks out, this warning is simply the system carrying out its own verification process.",{"type":14,"id":89,"html":190},"If it keeps warning even from the official channel",{"type":7,"html":192},"In the overwhelming majority of cases, confirming the source settles the question. But if the official channel has been double-checked repeatedly and the warning still shows up every time, there's no need to keep grinding through it alone — contacting support directly with the exact system version and warning text is more efficient than repeated attempts on your own, since support can tell whether this particular release genuinely needs an updated signature or notarization. That's usually not something fixable from the user's end at all, and waiting for an update beats forcing it through.",{"type":7,"html":194},"The other direction matters too: if the warning is coming from an installer obtained somewhere the source can't be pinned down, the goal shouldn't be getting it to install successfully — it should be doubting that source itself. The method described earlier for spotting a fake source exists exactly for this situation.",{"type":14,"id":96,"html":196},"In summary",{"type":7,"html":198},"Four systems phrase it differently, but they're all saying the same thing: this installer hasn't been verified through the official distribution channel. Confirm the source first — from the official channel, the warning is very likely just normal process; source unclear, check the domain and link carefully before deciding whether to continue, rather than rushing to make the warning disappear. That order matters more than memorising what each system happens to call its warning — four systems, four names, one and the same way of judging it.",{"type":7,"html":200},"Getting installed cleanly is only half the job — logging in comes next, and \u003Ca href=\"\u002Fen\u002Fblog\u002Fvpn-login-problems\u002F\">VPN login failing, no verification code?\u003C\u002Fa> covers the common snags right after this one. The correct entry point for every platform can be found through the official site's \u003Ca href=\"\u002Fen\u002Ffeatures\u002F\">features page\u003C\u002Fa> or \u003Ca href=\"\u002Fen\u002Fsignup\u002F\">download page\u003C\u002Fa>, which avoids this warning at the source.",[202,205,208,211,214,217],{"q":203,"a":204},"Does an untrusted warning mean the app has a virus?","Not necessarily. The warning itself only means the install wasn't verified through that platform's own official distribution channel — that's a separate question from whether it contains malicious code. Whether the source is official matters more than the warning itself.",{"q":206,"a":207},"Why does an installer from the official site still show this warning?","A newly released version needs some time to build up enough trust signal on each platform, and can trigger a warning in its first few days even when the signature and source are both fine. That has nothing to do with whether the installer itself is a problem.",{"q":209,"a":210},"What's the normal way to install on an iPhone?","Installing through the App Store is the distribution method Apple itself supports, and it never triggers this warning — the official site's download link leads to the correct App Store page.",{"q":212,"a":213},"Where is it safe to download the Android app?","Stick to the link and domain given on the official page. When the warning shows up, confirm the installer really came from that page rather than a link forwarded or shared from somewhere else.",{"q":215,"a":216},"Windows or macOS keeps warning me. Is something wrong with my computer?","No. That's the system's own built-in security check verifying the installer's source and signature — it has nothing to do with the computer itself. Any computer would show the same warning for the same unverified installer.",{"q":218,"a":219},"It's already installed. Anything else worth watching for?","Once it's installed, logging in and using it normally is all that's left. If the same source keeps triggering warnings, or a page looks unfamiliar, check it against \u003Ca href=\"\u002Fen\u002Fblog\u002Fhow-to-spot-a-fake-vpn-app\u002F\">how to spot a fake VPN app\u003C\u002Fa> before deciding whether to keep going.",1793276291384]