Download WebFence
A signed and notarized download from this site. WebFence isn't on the Mac App Store, because the App Store doesn't allow the kind of system filter WebFence needs.
The first public build isn't out yet. The download includes the 14-day free trial.
Requirements
- macOS 14 Sonoma or later
- An Apple silicon or Intel Mac
- An administrator account to install and manage WebFence (that's you)
- A separate Standard account for each child you want to protect
Before you install
- Create your child's Standard account in System Settings ▸ Users & Groups if you haven't, then sign in to it once and finish the macOS welcome screens. A brand-new account needs to reach Apple at its first sign-in, which it can't once it is protected.
- Sign in to your administrator account for the installation.
Install
- Open the downloaded disk image.
- Drag WebFence to the Applications folder.
- Eject the disk image, then open WebFence from Applications. Don't open the copy on the disk image or in Downloads: macOS ties WebFence's background service to whichever copy you open, and a copy that later disappears breaks it until the next restart.
The three macOS approvals
macOS protects your Mac by asking an administrator before any app can run in the background or look at network traffic. WebFence's setup assistant walks you through each request in this order and waits until each one is done. You'll also be asked for your administrator password along the way; WebFence never shows its own password field.
- Allow the background service. macOS reports "Background item added". If WebFence asks, open System Settings ▸ General ▸ Login Items & Extensions and allow WebFence in the background. This is the service that keeps your list and stays running after the app is closed.
- Allow the system extension. macOS says a system extension was blocked. Allow it in System Settings ▸ General ▸ Login Items & Extensions ▸ Network Extensions (macOS 15 and later) or System Settings ▸ Privacy & Security (macOS 14). This is the filter itself.
- Allow content filtering. macOS asks: "WebFence" would like to filter network content. Click Allow. This switches the filter on.
Then choose the accounts to protect, add the allowed sites, and WebFence runs a self-test. When the dashboard says Protected, you're done.
If macOS asks for one of these approvals again later, for example after an update or after someone dragged WebFence to the Trash, that's expected: see limitations.
Updates
When you unlock WebFence, it checks for a new version and asks before installing it. After an update, the filter is replaced at your next unlock without another macOS prompt.
Removing WebFence
See how to uninstall. Dragging the app to the Trash is not the right way.