Require Approval for New App Connections
Require Approval pauses connections from apps that TinyShield does not know. You can review the app and its destinations before choosing Allow or Block. TinyShield remembers the choice for future connections.
Require Approval is a TinyShield PRO feature.
Review a new app, its signature, and its destinations before allowing or blocking it.
1. Benefits
- ✅ Stop a new app before its connection continues.
- ✅ Review the app name, path, code signature, and process details.
- ✅ See domains, IP addresses, countries, ports, and request counts.
- ✅ Allow or block one waiting app.
- ✅ Allow or block every waiting app at once.
- ✅ Remember each choice in the Allow List or Block List.
- ✅ Keep existing Block List rules active.
2. Turn on Require Approval
- Open TinyShield.
- Select the mode button in the top-right corner.
- Choose Require Approval.
- Confirm that the button shows Approval in yellow.
- Open an app that has no saved decision.
TinyShield brings up the approval window when the app tries to connect.
3. Review and decide
Before choosing, check:
- The application name, bundle identifier, and file path.
- Whether the code signature is valid and who signed it.
- The requested domains, IP addresses, countries, and ports.
- How many requests are waiting.
Then choose:
- Allow this app to let the app connect and remember it.
- Block this app to stop the app and remember it.
- Use the button menu to allow or block all waiting apps.
Review bulk actions carefully. They apply the same choice to every app waiting in the queue.
4. Change a saved choice
Open Tools → App Connection Decisions. Choose the Allow List or Block List, find the app, and remove or change its saved decision. The next matching connection follows the updated rule.
5. Keep TinyShield running
Require Approval needs the TinyShield app to remain running so it can show the approval window. Closing the main window is fine because TinyShield can stay in the menu bar.
If you explicitly quit TinyShield while Require Approval is active, it switches to Allow All and keeps the Block List active. This avoids leaving new connections waiting without an app to answer them.